Rotate and delete API access, not just revoke

Rotating hands out a fresh token, voids the old one and lifts a revocation. Deleting removes the row for good, taking its idempotency keys with it. Both are admin only and land in the audit log.
2026-08-14 09:08:43 +02:00
parent 7b4b5e1a14
commit 97b8092914
10 changed files with 325 additions and 43 deletions
@@ -14,7 +14,7 @@ async function counts() {
 	}
 }

-describe('seed', () => {
+describe('seed', { timeout: 30_000 }, () => {
 	it('legt Marken, Projekte und Beiträge an', async () => {
 		await seed()