Summary
After a session key rotates, x402-client.ts continues to serve cached authorization results tied to the old key.
Requirements
- Invalidate relevant cache entries as part of session key rotation
- Add a test verifying post-rotation calls do not use stale cached authorization
- Add a debug log entry for cache invalidation on rotation
- Document the invalidation step in the x402 README section
Summary
After a session key rotates, x402-client.ts continues to serve cached authorization results tied to the old key.
Requirements