Garrett Delfosse bd06fc5d84 fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.31) (#24902) ...

Backport of https://github.com/coder/coder/pull/22904 to `release/2.31`.

Adds an optimistic lock to `UpdateExternalAuthLinkRefreshToken` so that
a concurrent caller that lost a token-refresh race cannot overwrite a
valid token stored by the winner. The SQL `WHERE` clause now includes
`AND oauth_refresh_token = @old_oauth_refresh_token`.

Original PR: #22904
Merge commit: 53e52aef78

Cherry-pick applied cleanly with no conflicts.

> Generated by Coder Agents

Co-authored-by: Kyle Carberry <kyle@coder.com>

2026-05-01 14:45:56 -04:00

..

awsiamrds

test(coderd/database/awsiamrds): fix unclosed pubsub (#16202)

2025-01-20 17:25:31 +00:00

db2sdk

feat: add client column to aibridge_interceptions table (#21839)

2026-02-17 15:43:02 +01:00

dbauthz

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.31) (#24902)

2026-05-01 14:45:56 -04:00

dbfake

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

dbgen

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

dbmetrics

feat: add telemetry for task lifecycle events (#21922)

2026-02-24 17:04:42 +00:00

dbmock

feat: add telemetry for task lifecycle events (#21922)

2026-02-24 17:04:42 +00:00

dbpurge

feat: implement non-brittle TestDBPurgeAuthorization (#21442)

2026-01-21 11:27:01 +11:00

dbrollup

chore: arrange imports in a standard way (#21452)

2026-01-08 15:24:11 +04:00

dbtestutil

chore: arrange imports in a standard way (#21452)

2026-01-08 15:24:11 +04:00

dbtime

fix(coderd/database): aggregate user engagement statistics by interval (#16150)

2025-01-16 17:34:53 +02:00

gen/dump

test: change to explicitly compiling dbcleaner on posix (#20206)

2025-10-08 16:18:02 +04:00

gentest

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

migrations

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

provisionerjobs

chore: provisioner acquirer to respect organization ID of jobs (#13874)

2024-07-11 11:26:47 -05:00

pubsub

chore: arrange imports in a standard way (#21452)

2026-01-08 15:24:11 +04:00

queries

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.31) (#24902)

2026-05-01 14:45:56 -04:00

sdk2db

chore(coderd/database): remove deprecated db2sdk.List(Lazy)? methods (#21902)

2026-02-03 17:52:07 +00:00

.gitignore

feat: add audit logging database schema (#1225)

2022-05-02 19:30:46 +00:00

check_constraint.go

chore(coderd/database): enforce workspace ACL JSON object constraints (#22019)

2026-02-10 16:17:29 -08:00

connector.go

fix: use authenticated urls for pubsub (#14261)

2024-08-26 15:04:04 +00:00

constants.go

feat: allow TemplateAdmin to delete prebuilds via auth layer (#18333)

2025-06-20 17:36:32 +01:00

db_test.go

chore: remove references to dbtestutil.WillUsePostgres (#20436)

2025-10-23 14:24:54 +02:00

db.go

chore: remove dbmem comment references (#22056)

2026-02-12 09:06:33 +00:00

dump.sql

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

errors.go

chore: improve build deadline code (#19203)

2025-08-07 11:00:31 +10:00

foreign_key_constraint.go

feat(coderd/provisionerdserver): insert sub agent resource (#21699)

2026-01-30 17:19:19 +00:00

generate.sh

chore: manage tool versions in go.mod (#21455)

2026-01-08 16:25:28 +00:00

lock.go

fix: make boundary usage telemetry collection atomic (#21907)

2026-02-06 09:52:17 -07:00

modelmethods_internal_test.go

feat: add deployment-wide option to disable workspace sharing (#21172)

2025-12-09 08:13:09 -08:00

modelmethods.go

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

modelqueries_internal_test.go

perf: cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24129)

2026-04-09 12:46:59 -04:00

modelqueries.go

perf: cap count queries, use native UUID ops for audit/conn logs (backport #23835) (#24129)

2026-04-09 12:46:59 -04:00

models.go

fix: exclude provisioner_state from workspace_build_with_user view (#22159)

2026-02-23 22:46:17 -06:00

no_slim.go

chore: avoid depending on rbac in slim builds (#17959)

2025-05-22 19:48:23 +10:00

oidcclaims_test.go

chore: remove dbmem (#18803)

2025-07-09 09:46:31 +02:00

pglocks.go

chore: update golang to 1.24.1 (#17035)

2025-03-26 01:56:39 -05:00

querier_test.go

fix: filter sub-agents from build duration metric (#22732) (#22919)

2026-03-10 14:11:01 -05:00

querier.go

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.31) (#24902)

2026-05-01 14:45:56 -04:00

queries.sql.go

fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904) (backport to 2.31) (#24902)

2026-05-01 14:45:56 -04:00

sqlc.yaml

feat: add telemetry for task lifecycle events (#21922)

2026-02-24 17:04:42 +00:00

tx_test.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

tx.go

chore: add tx metrics and logs for serialization errors (#15215)

2024-10-25 12:14:15 -04:00

types.go

feat: add sharing info to /workspaces endpoint (#21049)

2025-12-15 08:42:08 -08:00

unique_constraint.go

feat: add boundary usage tracking database schema and tracker skeleton (#21670)

2026-01-27 13:29:21 -07:00