From a4cfbe811045697bf8e49ac030fae9b4146c1a60 Mon Sep 17 00:00:00 2001
From: HikeMap User <melancholytron@gmail.com>
Date: Mon, 5 Jan 2026 09:56:33 -0600
Subject: [PATCH] Clear all refresh tokens on container restart
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Forces all users to log in again when the server restarts.
Useful for applying auth changes or clearing stale sessions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 database.js | 7 +++++++
 server.js   | 3 +++
 2 files changed, 10 insertions(+)

diff --git a/database.js b/database.js
index c124477..0b1c734 100644
--- a/database.js
+++ b/database.js
@@ -550,6 +550,13 @@ class HikeMapDB {
         return stmt.run();
     }
 
+    clearAllRefreshTokens() {
+        const stmt = this.db.prepare(`DELETE FROM refresh_tokens`);
+        const result = stmt.run();
+        console.log(`Cleared ${result.changes} refresh tokens on startup`);
+        return result;
+    }
+
     // RPG Stats methods
     getRpgStats(userId) {
         const stmt = this.db.prepare(`
diff --git a/server.js b/server.js
index 6a0c996..4765c8a 100644
--- a/server.js
+++ b/server.js
@@ -2356,6 +2356,9 @@ server.listen(PORT, async () => {
         db = new HikeMapDB(dbPath).init();
         console.log('Database initialized');
 
+        // Clear all refresh tokens on startup (logs everyone out)
+        db.clearAllRefreshTokens();
+
         // Seed default monsters if they don't exist
         db.seedDefaultMonsters();