fix(api): validate token team context

2026-07-13 23:07:21 +00:00 · 2026-06-01 15:17:55 +02:00
parent 4d0be415c8
commit a511bd9b67
14 changed files with 277 additions and 23 deletions
@@ -2,6 +2,7 @@

 namespace App\Models;

+use App\Actions\User\RevokeUserTeamTokens;
 use App\Events\ServerReachabilityChanged;
 use App\Notifications\Channels\SendsDiscord;
 use App\Notifications\Channels\SendsEmail;
@@ -72,6 +73,8 @@ class Team extends Model implements SendsDiscord, SendsEmail, SendsPushover, Sen
        });

        static::deleting(function (Team $team) {
+            RevokeUserTeamTokens::forTeam($team->id);
+
            foreach ($team->privateKeys as $key) {
                $key->delete();
            }