Function revokeAllForUser

apps/api/src/lib/jwt/jwt-revocation.ts:67–81

(userId: string)

 * attacker racing the call).
 */
const revokeAllForUser = async (userId: string): Promise<void> => {
  const cutoffSeconds = Math.floor(nowMs() / 1000) + 1;

  try {
    await cacheService.set(userRevokeKey(userId), cutoffSeconds, {
      ttlSeconds: USER_REVOKE_TTL_SECONDS,
    });
  } catch (error: unknown) {
    logger.warn("Failed to revoke all JWTs for user", {
      event: "auth.jwt.revoke_user_failed",
      userId,
      error: getErrorMessage(error),
    });
  }
};

/**
 * Whether the given JTI has been blocklisted. On cache errors the