@kaavee315checks…codex/propose-fix-for-revoked-connection-refresh → master1 files · +18 −0review: @rohanprabhureview: @sarthakreview: @acsrujanreview: @anshugarg15updated 1w agostatus: ACTIVE, which breaks the intended revocation security boundary.apps/apollo/src/lib/connected_accounts/refreshAccessToken.ts added a REVOKED-status guard inside the S2S_OAUTH2 early-refresh branch so that when connectionStatus === ConnectionStatusEnum.REVOKED the function returns SKIPPED unless the caller explicitly sets allowRevokedConnectionExecute = true, and retained a warn log when the override is used.pnpm vitest for the related refresh validation, but the test invocation could not execute in this environment due to missing secrets tooling (doppler) and no matching test file under the workspace Vitest include patterns, so no new unit tests were executed; the change is minimal and verified by code inspection of the refresh control flow in refreshAccessToken.ts.Based on git blame analysis of 1 file(s):
| Contributor | Contribution | Files |
|---|---|---|
| anshugarg15 | 35% | 1 |
| lingalarahul7 | 20% | 1 |
| Dhawal Upadhyay | 19% | 1 |
| Zen | 9% | 1 |
| jkomyno | 6% | 1 |
Based on git history, anshugarg15 or lingalarahul7 would be good reviewer(s) for this PR.
🤖 Based on git blame with recency weighting (recent edits count more).