feat(auth): org session policies — lifetime/idle limits, org-wide revocation#5862

Merged

waleedlatif1 merged 12 commits into

stagingfrom

feat/org-session-policies

Jul 22, 2026

Commits on Jul 22, 2026

feat(auth): org session policies — lifetime/idle limits, org-wide revocation, cookie-cache versioning
waleedlatif1
committed
refactor(auth): consolidate session-policy clamp semantics, shared security-policy version module, canonical bounds, docs
waleedlatif1
committed
polish(session-policy): cleanup pass — muted field labels, spinner reset, state tracker, response-seeded baseline, comment trims
waleedlatif1
committed
fix(session-policy): govern member sessions by membership (closes revoke cookie-cache hole), normalize createdAt, remount on org switch, sync audit mock
waleedlatif1
committed
fix(session-policy): clamp pre-join sessions on invite acceptance, normalize expiresAt, sync unified nav test
waleedlatif1
committed
fix(session-policy): invalidate membership cache on removal/transfer, spare impersonator sessions in revoke-all, raise idle floor to 2x cookie window
waleedlatif1
committed
fix(session-policy): resolve governing org by membership only — activeOrganizationId goes stale across transfer/leave
waleedlatif1
committed
fix(session-policy): atomic policy save + eager clamp, asymmetric membership TTL, admin-add cache invalidation
waleedlatif1
committed
fix(session-policy): org-scoped cookie version string, atomic revoke delete+bump
waleedlatif1
committed
fix(session-policy): plan-gate effective policy so downgraded orgs stop enforcing automatically
waleedlatif1
committed
chore(session-policy): drop dead bumpSecurityPolicyVersion helper — call sites bump transactionally
waleedlatif1
committed
fix(session-policy): unify join paths on applySessionPolicyToNewMember; final audit polish (dead exports, response bound, test name)
waleedlatif1
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(auth): org session policies — lifetime/idle limits, org-wide revocation#5862

feat(auth): org session policies — lifetime/idle limits, org-wide revocation#5862
waleedlatif1 merged 12 commits into
stagingfrom
feat/org-session-policies

Commits on Jul 22, 2026

feat(auth): org session policies — lifetime/idle limits, org-wide revocation, cookie-cache versioning

refactor(auth): consolidate session-policy clamp semantics, shared security-policy version module, canonical bounds, docs

polish(session-policy): cleanup pass — muted field labels, spinner reset, state tracker, response-seeded baseline, comment trims

fix(session-policy): govern member sessions by membership (closes revoke cookie-cache hole), normalize createdAt, remount on org switch, sync audit mock

fix(session-policy): clamp pre-join sessions on invite acceptance, normalize expiresAt, sync unified nav test

fix(session-policy): invalidate membership cache on removal/transfer, spare impersonator sessions in revoke-all, raise idle floor to 2x cookie window

fix(session-policy): resolve governing org by membership only — activeOrganizationId goes stale across transfer/leave

fix(session-policy): atomic policy save + eager clamp, asymmetric membership TTL, admin-add cache invalidation

fix(session-policy): org-scoped cookie version string, atomic revoke delete+bump

fix(session-policy): plan-gate effective policy so downgraded orgs stop enforcing automatically

chore(session-policy): drop dead bumpSecurityPolicyVersion helper — call sites bump transactionally

fix(session-policy): unify join paths on applySessionPolicyToNewMember; final audit polish (dead exports, response bound, test name)