max / makenotwork

202 B · 4 lines History Blame Raw

1	-- Track when JWTs should be considered invalid (set on password change).
2	-- SyncKit JWT extractor rejects tokens with iat < this timestamp.
3	ALTER TABLE users ADD COLUMN jwt_invalidated_at TIMESTAMPTZ;
4