refactor(sse): narrow canonical audience scopes

2026-03-31 22:56:12 +02:00
parent a76b173f4b
commit ac29ce3567
5 changed files with 64 additions and 24 deletions
@@ -3,7 +3,6 @@ import {
  canonicalizeSseAudiences,
  permissionAudience,
  resourceAudience,
-  roleAudience,
  type SseAudience,
  type SseSubscriptionOptions,
  userAudience,
@@ -35,7 +34,6 @@ export function deriveUserSseSubscription(
  return {
    audiences: canonicalizeSseAudiences([
      userAudience(identity.userId),
-      roleAudience(identity.systemRole),
      ...(identity.resourceId ? [resourceAudience(identity.resourceId)] : []),
      ...Array.from(permissions, (permission) => permissionAudience(permission)),
    ]),