Skip to content

Keep V3 token caches local to each client - #27

Draft
SproutSeeds wants to merge 1 commit into
actigraph:masterfrom
SproutSeeds:fix/client-token-isolation
Draft

SproutSeeds wants to merge 1 commit into
actigraph:masterfrom
SproutSeeds:fix/client-token-isolation

Conversation

@SproutSeeds

@SproutSeeds SproutSeeds commented Sep 14, 2026

Copy link
Copy Markdown

I moved the V3 token cache onto each client while preserving reuse by API scope. With the current module cache, two clients using different credentials can send the first client's token for the same scope. The regression test reproduces that behavior and passes with the instance cache.

Fourteen offline checks pass, covering alternating clients, scope routing across all eight V3 entry points, pagination ordering, independent invalidation, and the original 404 control. Original lint checks pass. Linux fork CI passes all 14 offline checks, original lint, and builds on Python 3.11 and 3.12: https://github.com/SproutSeeds/actiapi/actions/runs/34814951073. The workflow checks out this exact contribution commit. The 13 existing live study tests remain unrun. This draft establishes the client behavior using synthetic credentials and mocked responses.

I would like to complete live API verification for this contribution. Could you provide access to a test study containing synthetic data, or run the existing integration tests against this branch? You can reach me at cody@frg.earth to coordinate account setup and secure credential delivery.

I also sent a provisioning inquiry to support@ametris.com referencing this PR. The upstream Actions run is waiting for maintainer approval; the fork verification above has completed.

Cody

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant