Skip to content

Stop a helper token from staying valid after its owner is removed - #79

Merged
bryanlaiwei merged 1 commit into
mainfrom
helper-token-removal
Oct 23, 2026
Merged

bryanlaiwei merged 1 commit into
mainfrom
helper-token-removal

Conversation

@bryanlaiwei

Copy link
Copy Markdown
Owner

Summary

  • Pairing locks the member's membership before it issues a helper token, so removal cannot finish revoking tokens and then miss one inserted in the gap.
  • A helper token is accepted only while its owner is still a member of the workspace.

Test plan

  • Overlapping removal and pairing leaves the issued token revoked and unusable
  • A token left unrevoked after its membership is deleted is refused
  • Existing membership and layout tests still pass

Made with Cursor

Pairing and removal could overlap and leave a newly issued token usable.

Co-authored-by: Cursor <cursoragent@cursor.com>
@vercel

vercel Bot commented Oct 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
contour Ignored Ignored Oct 23, 2026 6:59am UTC

@railway-app
railway-app Bot temporarily deployed to Contour / Contour-pr-79 October 23, 2026 06:59 Destroyed
@bryanlaiwei
bryanlaiwei merged commit 38a8d08 into main Oct 23, 2026
5 of 6 checks passed
@bryanlaiwei
bryanlaiwei deleted the helper-token-removal branch October 23, 2026 07:02

This branch was successfully deployed

No deployments
Contour / Contour-pr-79 — 28c97006 Deployed Oct 23, 2026 by railway-app[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant