Merge pull request #3655 from moverq1337/fix/access-token-delete-root-key

Fix access token deletion for root API keys
This commit is contained in:
Owen Schwartz
2026-08-31 16:54:18 -04:00
committed by GitHub
@@ -68,6 +68,11 @@ export async function verifyApiKeyAccessTokenAccess(
); );
} }
if (apiKey.isRoot) {
// Root keys can access any access token in any org
return next();
}
if (!resource.orgId) { if (!resource.orgId) {
return next( return next(
createHttpError( createHttpError(