Garrett Delfosse 63a9280a6f fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.29) (#24901) ...

Backport of https://github.com/coder/coder/pull/22904 to `release/2.29`.

Adds an optimistic lock to `UpdateExternalAuthLinkRefreshToken` so that
a concurrent caller that lost a token-refresh race cannot overwrite a
valid token stored by the winner. The SQL `WHERE` clause now includes
`AND oauth_refresh_token = @old_oauth_refresh_token`.

Original PR: #22904
Merge commit: 53e52aef78

Cherry-pick applied cleanly with no conflicts.

> Generated by Coder Agents

Co-authored-by: Kyle Carberry <kyle@coder.com>

2026-05-01 14:37:11 -04:00

..

awsiamrds

test(coderd/database/awsiamrds): fix unclosed pubsub (#16202)

2025-01-20 17:25:31 +00:00

db2sdk

feat: add prebuild invalidation via last_invalidated_at timestamp (#20582)

2025-11-20 17:12:25 +01:00

dbauthz

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.29) (#24901)

2026-05-01 14:37:11 -04:00

dbfake

feat: add prebuild invalidation via last_invalidated_at timestamp (#20582)

2025-11-20 17:12:25 +01:00

dbgen

feat: add display name field for tasks (#20856)

2025-11-25 13:00:59 +00:00

dbmetrics

feat: add notification warning alert to Tasks page (#20900) (#20981)

2025-12-01 14:08:50 -06:00

dbmock

feat: add notification warning alert to Tasks page (#20900) (#20981)

2025-12-01 14:08:50 -06:00

dbpurge

feat: purge expired api keys in dbpurge (#20863)

2025-11-24 10:24:32 -06:00

dbrollup

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

dbtestutil

test: track postgres database creation by package and test name (#20492)

2025-10-27 14:31:32 +04:00

dbtime

fix(coderd/database): aggregate user engagement statistics by interval (#16150)

2025-01-16 17:34:53 +02:00

gen/dump

test: change to explicitly compiling dbcleaner on posix (#20206)

2025-10-08 16:18:02 +04:00

gentest

refactor: replace golang.org/x/exp/slices with slices (#16772)

2025-03-04 00:46:49 +11:00

migrations

fix: backport migration fixes (#21611)

2026-01-21 15:45:58 +00:00

provisionerjobs

chore: provisioner acquirer to respect organization ID of jobs (#13874)

2024-07-11 11:26:47 -05:00

pubsub

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

queries

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.29) (#24901)

2026-05-01 14:37:11 -04:00

sdk2db

feat: add filtering options to provisioners list (#19378)

2025-08-21 16:03:34 -04:00

.gitignore

…

check_constraint.go

refactor(coderd): drop sidebar app constraint and simplify provisionerdserver for tasks (#20591)

2025-11-03 13:46:38 +02:00

connector.go

fix: use authenticated urls for pubsub (#14261)

2024-08-26 15:04:04 +00:00

constants.go

feat: allow TemplateAdmin to delete prebuilds via auth layer (#18333)

2025-06-20 17:36:32 +01:00

db_test.go

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

db.go

feat: enable soft delete for organizations (#16584)

2025-02-24 12:59:41 -05:00

dump.sql

perf: add index to improve the GetWorkspaceAgentByInstanceID query performance (#20936)

2025-11-26 05:57:25 +02:00

errors.go

chore: improve build deadline code (#19203)

2025-08-07 11:00:31 +10:00

foreign_key_constraint.go

fix(coderd): remove deprecated AITaskSidebarApp column (#20680)

2025-11-07 12:45:45 +02:00

generate.sh

…

lock.go

feat: implement reconciliation loop (#17261)

2025-04-17 09:29:29 -04:00

modelmethods_internal_test.go

feat: add allow_list to resource-scoped API tokens (#19964)

2025-10-09 14:53:08 +02:00

modelmethods.go

perf: reduce DB calls to GetWorkspaceByAgentID via caching workspace info (#20662)

2025-11-25 14:45:05 -08:00

modelqueries_internal_test.go

perf: cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24116)

2026-04-09 12:46:24 -04:00

modelqueries.go

perf: cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24116)

2026-04-09 12:46:24 -04:00

models.go

feat: add display name field for tasks (#20856)

2025-11-25 13:00:59 +00:00

no_slim.go

chore: avoid depending on rbac in slim builds (#17959)

2025-05-22 19:48:23 +10:00

oidcclaims_test.go

chore: remove dbmem (#18803)

2025-07-09 09:46:31 +02:00

pglocks.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

querier_test.go

fix: avoid re-using AuthInstanceID for sub agents (#22196) (#22212)

2026-02-23 17:37:41 -05:00

querier.go

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.29) (#24901)

2026-05-01 14:37:11 -04:00

queries.sql.go

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.29) (#24901)

2026-05-01 14:37:11 -04:00

sqlc.yaml

fix(coderd/database): improve task status in tasks_with_status view (#20683)

2025-11-14 19:52:26 +02:00

tx_test.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

tx.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

types.go

feat: add allow_list to resource-scoped API tokens (#19964)

2025-10-09 14:53:08 +02:00

unique_constraint.go

chore: add aibridge data to telemetry (#20449)

2025-10-28 03:16:41 +11:00