starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-25 08:00:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: revoke tokens on demotions of superadmins

Browse Source
This commit is contained in:
Ruben Fiszel
2025-09-10 09:20:11 +00:00
parent 204e64ea00
commit 4c41cc0dc2
2 changed files with 23 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/windmill-api/src/users.rs
+9
View File
@@ -1364,6 +1364,7 @@ async fn update_user(
require_super_admin(&db, &authed.email).await?;
let mut tx = db.begin().await?;
let mut revoke_tokens = false;
if let Some(sa) = eu.is_super_admin {
sqlx::query_scalar!(
"UPDATE password SET super_admin = $1 WHERE email = $2",
@@ -1372,6 +1373,7 @@ async fn update_user(
)
.execute(&mut *tx)
.await?;
revoke_tokens = true;
}
if let Some(dv) = eu.is_devops {
@@ -1382,6 +1384,13 @@ async fn update_user(
)
.execute(&mut *tx)
.await?;
revoke_tokens = true;
}
if revoke_tokens {
sqlx::query!("DELETE FROM token WHERE email = $1", &email_to_update)
.execute(&mut *tx)
.await?;
}
if let Some(n) = eu.name {