fix(auth): make change-password session revocation null-safe for Npgsql

2026-06-23 19:52:21 -07:00
parent 180dea60c1
commit 8f1af536ed
1 changed files with 1 additions and 1 deletions
@@ -186,7 +186,7 @@ public class AuthService : IAuthService
        var otherTokens = await _db.RefreshTokens
            .Where(rt => rt.UserId == userId
                      && rt.RevokedAt == null
-                      && rt.TokenHash != currentHash)
+                      && (currentHash == null || rt.TokenHash != currentHash))
            .ToListAsync();

        foreach (var token in otherTokens)