Skip to content

fix(oauth-server): serialize concurrent authorize/consent with row-level lock#2512

Open
fadymak wants to merge 1 commit intomasterfrom
fm/prodsec-103
Open

fix(oauth-server): serialize concurrent authorize/consent with row-level lock#2512
fadymak wants to merge 1 commit intomasterfrom
fm/prodsec-103

Conversation

@fadymak
Copy link
Copy Markdown
Contributor

@fadymak fadymak commented Apr 27, 2026

  • Refactors OAuthServerGetAuthorization and OAuthServerConsent to use a single transaction to serialize claiming pending authorizations via FOR UPDATE SKIP LOCKED
  • Ensures MarkExpired is committed even if the transaction is rolled back
  • Add tests for the OAuthServerGetAuthorization and OAuthServerConsent handlers

@fadymak fadymak requested a review from a team as a code owner April 27, 2026 07:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants