Skip to content

Cap the absolute max sessions per user at 100 - #783

Draft
dowski wants to merge 1 commit into
rebootfrom
dowski/cap-max-sessions
Draft

dowski wants to merge 1 commit into
rebootfrom
dowski/cap-max-sessions

Conversation

@dowski

@dowski dowski commented Oct 22, 2026

Copy link
Copy Markdown
Collaborator

This prevents unbounded growth of sessions due to buggy or abusive client applications. It keeps other operations (listing and revoking sessions) well within the limits of Convex functions.

Once old session cleanup is implemented, users should not hit this under normal use.

@vercel

vercel Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
auth-v2 Ready Ready Preview Oct 27, 2026 3:04pm UTC
1 Skipped Deployment
Project Deployment Actions Updated
convex-auth-docs Ignored Ignored Oct 27, 2026 3:04pm UTC

Request Review

@pkg-pr-new

pkg-pr-new Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
npm i https://pkg.pr.new/@convex-dev/auth@783

commit: cd4675c

@dowski
dowski force-pushed the dowski/cap-max-sessions branch from 061f061 to 9aa3f57 Compare October 26, 2026 23:27
@dowski
dowski force-pushed the dowski/revoke-session-handle branch from fcde1bf to 201b3bd Compare October 26, 2026 23:27
@dowski
dowski force-pushed the dowski/revoke-session-handle branch from 201b3bd to 957d13b Compare October 26, 2026 23:44
@dowski
dowski force-pushed the dowski/cap-max-sessions branch from 9aa3f57 to 7b4cb69 Compare October 26, 2026 23:44
@dowski
dowski force-pushed the dowski/revoke-session-handle branch 2 times, most recently from 520e0ba to 2a03112 Compare October 26, 2026 23:50
@dowski
dowski force-pushed the dowski/cap-max-sessions branch from 7b4cb69 to d77819b Compare October 26, 2026 23:53
@dowski
dowski force-pushed the dowski/revoke-session-handle branch from 2a03112 to adf014c Compare October 27, 2026 14:51
@dowski
dowski force-pushed the dowski/cap-max-sessions branch from d77819b to 50c7ed3 Compare October 27, 2026 14:51
@dowski
dowski changed the base branch from dowski/revoke-session-handle to graphite-base/783 October 27, 2026 15:00
@dowski
dowski force-pushed the dowski/cap-max-sessions branch from 50c7ed3 to 7b4d0bd Compare October 27, 2026 15:03
@dowski
dowski force-pushed the graphite-base/783 branch from adf014c to 09915cc Compare October 27, 2026 15:03
@cursor
cursor Bot changed the base branch from graphite-base/783 to reboot October 27, 2026 15:03
This prevents unbounded growth of sessions due to buggy or abusive client applications. It keeps other operations (listing and revoking sessions) well within the limits of Convex functions.

Once old session cleanup is implemented, users should not hit this under normal use.

This branch was successfully deployed

1 active deployment
Preview – auth-v2 — cd4675c7 Deployed Oct 27, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant