S-I1 accepts REPLACED, so IoTService revokes a superseded Alexa link's grant

Shipped

October 21, 2026 at 6:09 AM UTC

Author

Kamo

Commit

3482236

Owner 2026-10-21. KamoOAuthRevokeReason.REPLACED already exists (STRING-persisted, no CHECK on revoked_reason), so no shared-lib or DDL change; the internal revoke whitelist adds it and audits OAUTH_GRANT_REVOKED (REPLACED). SecurityService-only reasons (CODE_REUSE, REFRESH_REUSE, CLIENT_REVOKED, ORG_VOIDED) stay refused (pinned).