Jeff Mitchell 1acd690299 Clear account ID if token does not map to a user ...

It's possible there are acceptable use cases for still matching account
ID if the account no longer maps to a user, but it's equally possible
that this can cause confusion. Removing it seems safer.

2020-10-12 10:15:38 -04:00

..

password

deprecate access to underlying *sql.DB via internal/db.DB() (#506)

2020-09-30 18:11:59 -04:00

store

The name. The name. The name!

2020-08-10 17:15:02 -04:00

additional_verification_test.go

Rename authorize to authorize-session (#531)

2020-10-05 11:02:23 -04:00

auth_test.go

Use scope-specific token DEKs (#342)

2020-09-14 12:30:11 -04:00

auth.go

Clear account ID if token does not map to a user

2020-10-12 10:15:38 -04:00

db_test.go

deprecate access to underlying *sql.DB via internal/db.DB() (#506)

2020-09-30 18:11:59 -04:00

option.go

Adding Authz checks that support new pathing (#328)

2020-09-04 14:48:11 -07:00

subtype.go

Adding Authz checks that support new pathing (#328)

2020-09-04 14:48:11 -07:00

testing.go

Use scope-specific token DEKs (#342)

2020-09-14 12:30:11 -04:00