fix(auth): make org session policy and cookie-cache version cache-coherent#5947

Open

waleedlatif1 wants to merge 13 commits into

fix/session-policy-cache-coherence

Commits on Jul 25, 2026

fix(auth): make org session policy and cookie-cache version cache-coherent
waleedlatif1
committed
fix(auth): amortize the entitlement check and bound cache eviction cost
waleedlatif1
committed
refactor(auth): read the session policy fresh instead of caching it
waleedlatif1
committed
fix(billing): actually propagate subscription read failures from the resolver
waleedlatif1
committed
fix(auth): publish the committed version instead of invalidating the cache
waleedlatif1
committed
fix(auth): fail closed when a KNOWN org's session policy cannot be read
waleedlatif1
committed
refactor(auth): drop LOC that did not earn its place
waleedlatif1
committed
refactor(auth): use the shared LRUCache instead of hand-rolled eviction
waleedlatif1
committed
refactor(auth): correct a drifted docstring and two cache nits
waleedlatif1
committed
fix(auth): clamp sessions created before their member row exists
waleedlatif1
committed
fix(auth): prefer a mid-flight published version over the default on read failure
waleedlatif1
committed
fix(auth): distrust a version read that outlived the cache TTL
waleedlatif1
committed
revert(auth): drop the TTL-overrun retry; document the residual instead
waleedlatif1
committed