Classic298 977d638afe fix: invalidate stale Socket.IO sessions on role change and user deletion (#23642) ...

SESSION_POOL caches user.role at connection time and never refreshes it. When an admin demotes or deletes a user, their socket sessions retain the old cached role until voluntary disconnect, allowing continued use of admin-gated socket features (ydoc editing, channel access).

Adds disconnect_user_sessions() helper that disconnects all sockets for a user ID. Called from update_user_by_id (on role change) and delete_user_by_id. The client auto-reconnects and re-authenticates with fresh DB data.

2026-04-12 16:19:38 -05:00

..

main.py

fix: invalidate stale Socket.IO sessions on role change and user deletion (#23642)

2026-04-12 16:19:38 -05:00

utils.py

refac

2026-03-22 05:48:05 -05:00