fix(idaa): also purge db_events on Novi auth failure

Extends the IDB purge from the previous commit to include
db_events.event — covers cached IDAA recovery meeting records.
No module overlap in current client deployments.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Scott Idem
2026-04-19 17:37:50 -04:00
parent 9d8c0e5dd4
commit ff4295b24c

View File

@@ -20,6 +20,7 @@ import {
import { idaa_loc, idaa_sess, idaa_slct } from '$lib/stores/ae_idaa_stores';
import { db_posts } from '$lib/ae_posts/db_posts';
import { db_archives } from '$lib/ae_archives/db_archives';
import { db_events } from '$lib/ae_events/db_events';
interface Props {
/** @type {import('./$types').LayoutData} */
@@ -325,11 +326,11 @@ async function verify_novi_uuid(
$idaa_loc.novi_full_name = null;
$idaa_loc.novi_verified = false;
// Purge private IDAA data from IDB — do not leave sensitive data cached after auth failure.
// db_events.event is intentionally excluded: it is shared with conference event modules.
db_posts.post.clear().catch(() => {});
db_posts.comment.clear().catch(() => {});
db_archives.archive.clear().catch(() => {});
db_archives.content.clear().catch(() => {});
db_events.event.clear().catch(() => {});
} finally {
verify_in_flight = false;
novi_verifying = false;
@@ -368,6 +369,7 @@ async function verify_novi_uuid(
db_posts.comment.clear().catch(() => {});
db_archives.archive.clear().catch(() => {});
db_archives.content.clear().catch(() => {});
db_events.event.clear().catch(() => {});
location.reload();
}}>
<span class="fas fa-redo m-1"></span>