hsiegeln 7066795c3c fix(auth): strip user: prefix before token-revocation lookup ...

JwtAuthenticationFilter compared the JWT subject (user:alice) against
users.user_id (bare alice), so token_revoked_before was never read for
any user. Strips the prefix to match the convention documented in
CLAUDE.md. Adds JwtRevocationIT as a regression.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-27 09:11:55 +02:00

..

src

fix(auth): strip user: prefix before token-revocation lookup

2026-04-27 09:11:55 +02:00

pom.xml

test(license): LicenseLifecycleIT — install/persist/revalidate/reject

2026-04-26 15:56:01 +02:00