From 8840ac05b83da48b90c626777b4e044ef14d9e08 Mon Sep 17 00:00:00 2001
From: Trezy <tre@trezy.com>
Date: Fri, 08 May 2026 18:08:58 +0000
Subject: [PATCH] fix: cleanup broken sessions

Signed-off-by: Trezy <tre@trezy.com>
---
 src/oauth/pds_write.rs | 7 +++++--
 1 file(s) changed, 5 insertion(s)(+), 2 deletion(s)(-)

diff --git a/src/oauth/pds_write.rs b/src/oauth/pds_write.rs
--- a/src/oauth/pds_write.rs
+++ b/src/oauth/pds_write.rs
@@ -190,13 +190,16 @@ user_did = %creds.session.user_did,
                     api_client_id = %creds.session.api_client_id,
                     "refresh token permanently invalid, deleting broken session"
                 );
-                let _ = super::sessions::delete_dpop_session(
+                if let Err(del_err) = super::sessions::delete_dpop_session(
                     pool,
                     backend,
                     &creds.session.api_client_id,
                     &creds.session.user_did,
                 )
-                .await;
+                .await
+                {
+                    tracing::error!(%del_err, "failed to delete broken DPoP session");
+                }
                 return Err(AppError::Auth(
                     "session expired, please re-authenticate".into(),
                 ));

--
tangled.sh