Antigravity db175ebff6 fix(auth): revoke JWT on logout and harden Google sign-in ...

Logout now increments sessionVersion so existing JWTs are rejected
server-side, deletes orphaned DB sessions, and uses redirectTo for signOut.
Google OAuth requests account selection each time; optional AUTH_GOOGLE_PROMPT=login
forces Google re-authentication on shared devices.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-05-17 17:29:51 +00:00

8.1 KiB

Raw Blame History

View Raw