Skip to content

fix(api): reject deleted account sessions - #117

Draft
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/critical-bug-management-53d4
Draft

fix(api): reject deleted account sessions#117
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/critical-bug-management-53d4

Conversation

@cursor

@cursor cursor Bot commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

Summary

  • add a shared deleted-account detector for anonymized Agent rows
  • reject and clear stale browser sessions in /dashboard, /auth/me, /auth/api-key, and billing checkout auth
  • clear the browser session cookie after successful account deletion
  • add a regression for deleted-account sessions reaching auth/billing paths

Validation

  • npm run build
  • node tests/deleted-account-session.test.mjs
  • node tests/verify-resend.test.mjs
  • node tests/verify-activation.test.mjs
  • node tests/intent-funnel.test.mjs
Open in Web View Automation 

cursoragent and others added 2 commits August 6, 2026 05:15
Co-authored-by: Deesmo <Deesmo@users.noreply.github.com>
Co-authored-by: Deesmo <Deesmo@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant