Sweep stale OAuth clients from the directory alone
Issuing or rotating a refresh token sets last_used_at and refresh tokens expire well inside the idle window, so a client with a live grant can never be stale; the per-account "still referenced" fan-outs are gone. Assisted-by: Crush
2 files changed+10−55
Rendering diff…