fix(tokens): revoke ambiguous API tokens (#2195)

migmartri · web-flow · commit e9fc9a48589b · 2025-07-04T13:40:45.000+02:00
Signed-off-by: Miguel Martinez &lt;miguel@chainloop.dev&gt;
diff --git a/app/controlplane/pkg/data/apitoken.go b/app/controlplane/pkg/data/apitoken.go
@@ -76,6 +76,8 @@ func (r *APITokenRepo) FindByNameInOrg(ctx context.Context, orgID uuid.UUID, nam
 
 	if projectID != nil {
 		query = query.Where(apitoken.ProjectIDEQ(*projectID))
+	} else {
+		query = query.Where(apitoken.ProjectIDIsNil())
 	}
 
 	token, err := query.Only(ctx)

Original file line number	Diff line number	Diff line change
`@@ -76,6 +76,8 @@ func (r *APITokenRepo) FindByNameInOrg(ctx context.Context, orgID uuid.UUID, nam`
`76`	`76`
`77`	`77`	`if projectID != nil {`
`78`	`78`	`query = query.Where(apitoken.ProjectIDEQ(*projectID))`
	`79`	`+ } else {`
	`80`	`+ query = query.Where(apitoken.ProjectIDIsNil())`
`79`	`81`	`}`
`80`	`82`
`81`	`83`	`token, err := query.Only(ctx)`