fix: invalidate auth cache when rotating user API key - #883

Merged

AchoArnold merged 6 commits into

mainfrom

fix/881-rotate-apikey-cache-invalidation

May 13, 2026

Commits on May 13, 2026

fix: invalidate auth cache when rotating user API key (#881)

AchoArnold
and
Copilot
committed
fa78847
fix: use dedicated test user for rotation test to avoid mutating shared credential

AchoArnold
and
Copilot
committed
50b3311
fix: flush ristretto buffer before cache.Del to prevent async Set race

AchoArnold
and
Copilot
committed
d77b99c
fix: make UserRistrettoCache a singleton so all callers share one cache

AchoArnold
and
Copilot
committed
a3889cd
fix: make PhoneRistrettoCache a singleton to prevent stale cache entries

AchoArnold
and
Copilot
committed
5e0f801
revert: undo PhoneRistrettoCache singleton — it causes test interference

AchoArnold
and
Copilot
committed
2b18dbe