Sid a9b208f470 fix(auth): add config lock around migration methods (#4447) ...

Per code audit #4388: Wrap _migrate_single_user and
   _drop_reserved_loaded_users with _config_lock to ensure atomic
   config reads/writes and prevent potential race conditions during
   concurrent access.

   This is a defense-in-depth fix - these methods run at startup
   before concurrent requests are accepted, but adding the lock
   makes the code consistent with other config mutations.

2026-06-26 20:35:11 +02:00

29 KiB

Raw Permalink Blame History

View Raw