Vikrant Gupta 270988fb48 fix(tokenizer): persist last_observed_at on postgres (#12982) ...

#### Description

- The flush CTE rendered `last_observed_at` as an untyped literal, which
postgres resolves to `text` and refuses to assign to the `timestamptz`
column. The column never populated, so the idle expiry never applied.
- Build the CTE from the token model with only `id`, `last_observed_at`
and `updated_at`, so bun casts per dialect and no token secrets land in
the statement.
- Flush now applies cached times through `Token.UpdateLastObservedAt`,
which also skips rows with a newer stored value.
- Integration test in `passwordauthn` runs with a short GC interval and
asserts the column populates on both sql stores.

2026-09-28 14:23:01 +00:00

..

jwttokenizer

fix(tokenizer): require a jwt secret when the provider is jwt (#12899)

2026-09-18 04:06:28 +00:00

opaquetokenizer

fix(tokenizer): persist last_observed_at on postgres (#12982)

2026-09-28 14:23:01 +00:00

tokenizerstore/sqltokenizerstore

fix(tokenizer): persist last_observed_at on postgres (#12982)

2026-09-28 14:23:01 +00:00

tokenizertest

test: add mocks for tokenizer (#10081)

2026-01-22 02:04:26 +05:30

config_test.go

fix(tokenizer): require a jwt secret when the provider is jwt (#12899)

2026-09-18 04:06:28 +00:00

config.go

fix(tokenizer): require a jwt secret when the provider is jwt (#12899)

2026-09-18 04:06:28 +00:00

tokenizer.go

feat(tokenizer|sso): add tokenizer for session management and oidc sso support (#9183)

2025-10-16 18:00:38 +05:30

wrapped.go

feat(tokenizer|sso): add tokenizer for session management and oidc sso support (#9183)

2025-10-16 18:00:38 +05:30