mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
fix(coderd): ensure that user API keys are deleted when a user is (#7270)
Fixes an issue where API tokens belonging to a deleted user were not invalidated: - Adds a trigger to delete rows from the api_key stable when the column deleted is set to true in the users table. - Adds a trigger to the api_keys table to ensure that new rows may not be added where user_id corresponds to a deleted user. - Adds a migration to delete all API keys from deleted users. - Adds tests + dbfake implementation for the above.
This commit is contained in:
@@ -0,0 +1,9 @@
|
||||
BEGIN;
|
||||
|
||||
DROP TRIGGER IF EXISTS trigger_update_users ON users;
|
||||
DROP FUNCTION IF EXISTS delete_deleted_user_api_keys;
|
||||
|
||||
DROP TRIGGER IF EXISTS trigger_insert_apikeys ON api_keys;
|
||||
DROP FUNCTION IF EXISTS insert_apikey_fail_if_user_deleted;
|
||||
|
||||
COMMIT;
|
||||
Reference in New Issue
Block a user