iven
3e1413aebc
CI / rust-check (push) Has been cancelled
CI / rust-test (push) Has been cancelled
CI / frontend-build (push) Has been cancelled
CI / security-audit (push) Has been cancelled
fix(auth): 修复 Token 刷新并发竞态条件
使用原子 CAS（UPDATE WHERE token_hash = ? AND revoked_at IS NULL）
替代先查后改的非原子操作，防止同一 refresh token 被并发使用两次。
新增 TokenService::validate_and_revoke_atomic 方法，将 JWT 解码、
哈希匹配和 token 撤销合并为单次数据库操作。
2026-05-09 01:53:28 +08:00
..
2026-05-07 23:43:14 +08:00
2026-05-09 01:53:28 +08:00
2026-05-07 23:43:14 +08:00
2026-05-08 08:52:16 +08:00
2026-05-07 23:43:14 +08:00
2026-05-08 12:42:41 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-05-07 23:43:14 +08:00
2026-04-19 00:56:32 +08:00
2026-04-20 09:35:27 +08:00
2026-04-19 00:56:32 +08:00
2026-04-20 09:35:27 +08:00
2026-05-07 23:43:14 +08:00
2026-04-15 00:49:20 +08:00
2026-05-08 22:00:43 +08:00
2026-05-07 23:43:14 +08:00