HeyPuter
diff --git a/‎src/backend/src/api/APIError.js
Copy file name to clipboardExpand all lines: src/backend/src/api/APIError.js
+4Lines changed: 4 additions & 0 deletions b/‎src/backend/src/api/APIError.js
Copy file name to clipboardExpand all lines: src/backend/src/api/APIError.js
+4Lines changed: 4 additions & 0 deletions
diff --git a/‎src/backend/src/helpers.js
Copy file name to clipboardExpand all lines: src/backend/src/helpers.js
+1-1Lines changed: 1 addition & 1 deletion b/‎src/backend/src/helpers.js
Copy file name to clipboardExpand all lines: src/backend/src/helpers.js
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/‎src/backend/src/services/auth/AuthService.js
Copy file name to clipboardExpand all lines: src/backend/src/services/auth/AuthService.js
+5Lines changed: 5 additions & 0 deletions b/‎src/backend/src/services/auth/AuthService.js
Copy file name to clipboardExpand all lines: src/backend/src/services/auth/AuthService.js
+5Lines changed: 5 additions & 0 deletions
@@ -356,6 +356,10 @@ module.exports = class APIError {
             status: 401,
             message: 'Authentication failed.',
         },
+        'user_not_found': {
+            status: 401,
+            message: 'User not found.',
+        },
         'token_unsupported': {
             status: 401,
             message: 'This authentication token is not supported here.',
 
@@ -199,7 +199,7 @@ async function get_user(options) {
  */
 function invalidate_cached_user (user) {
     kv.del('users:username:' + user.username);
-    // kv.del('users:uuid:' + user.uuid);
+    kv.del('users:uuid:' + user.uuid);
     kv.del('users:email:' + user.email);
     kv.del('users:id:' + user.id);
 }
 
@@ -24,6 +24,7 @@ const { Context } = require("../../util/context");
 const APIError = require("../../api/APIError");
 const { DB_WRITE } = require("../database/consts");
 const { UUIDFPE } = require("../../util/uuidfpe");
+const { nou } = require("../../util/langutil");
 
 // This constant defines the namespace used for generating app UUIDs from their origins
 const APP_ORIGIN_UUID_NAMESPACE = '33de3768-8ee0-43e9-9e73-db192b97a5d8';
@@ -106,6 +107,10 @@ class AuthService extends BaseService {
 
             const user = await get_user({ uuid: decoded.user_uid });
 
+            if ( nou(user) ) {
+                throw APIError.create('user_not_found');
+            }
+            
             const actor_type = new UserActorType({
                 user,
                 session: session.uuid,