fix(idaa): also purge db_events on Novi auth failure
Extends the IDB purge from the previous commit to include db_events.event — covers cached IDAA recovery meeting records. No module overlap in current client deployments. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -20,6 +20,7 @@ import {
|
||||
import { idaa_loc, idaa_sess, idaa_slct } from '$lib/stores/ae_idaa_stores';
|
||||
import { db_posts } from '$lib/ae_posts/db_posts';
|
||||
import { db_archives } from '$lib/ae_archives/db_archives';
|
||||
import { db_events } from '$lib/ae_events/db_events';
|
||||
|
||||
interface Props {
|
||||
/** @type {import('./$types').LayoutData} */
|
||||
@@ -325,11 +326,11 @@ async function verify_novi_uuid(
|
||||
$idaa_loc.novi_full_name = null;
|
||||
$idaa_loc.novi_verified = false;
|
||||
// Purge private IDAA data from IDB — do not leave sensitive data cached after auth failure.
|
||||
// db_events.event is intentionally excluded: it is shared with conference event modules.
|
||||
db_posts.post.clear().catch(() => {});
|
||||
db_posts.comment.clear().catch(() => {});
|
||||
db_archives.archive.clear().catch(() => {});
|
||||
db_archives.content.clear().catch(() => {});
|
||||
db_events.event.clear().catch(() => {});
|
||||
} finally {
|
||||
verify_in_flight = false;
|
||||
novi_verifying = false;
|
||||
@@ -368,6 +369,7 @@ async function verify_novi_uuid(
|
||||
db_posts.comment.clear().catch(() => {});
|
||||
db_archives.archive.clear().catch(() => {});
|
||||
db_archives.content.clear().catch(() => {});
|
||||
db_events.event.clear().catch(() => {});
|
||||
location.reload();
|
||||
}}>
|
||||
<span class="fas fa-redo m-1"></span>
|
||||
|
||||
Reference in New Issue
Block a user