From 778897a4e9a43522a1698a205f68feb3c601ee2d Mon Sep 17 00:00:00 2001
From: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>
Date: Fri, 28 Nov 2025 17:01:15 +0000
Subject: [PATCH] Add a unit test that ensures that deleting a device purges
 the associated refresh token (#19230)

---
 changelog.d/19230.misc        |  1 +
 tests/handlers/test_device.py | 27 +++++++++++++++++++++++++++
 2 files changed, 28 insertions(+)
 create mode 100644 changelog.d/19230.misc

diff --git a/changelog.d/19230.misc b/changelog.d/19230.misc
new file mode 100644
index 0000000000..06704db25b
--- /dev/null
+++ b/changelog.d/19230.misc
@@ -0,0 +1 @@
+Add a unit test for ensuring associated refresh tokens are erased when a device is delted.
\ No newline at end of file
diff --git a/tests/handlers/test_device.py b/tests/handlers/test_device.py
index acd37a1c71..fa6bb4970b 100644
--- a/tests/handlers/test_device.py
+++ b/tests/handlers/test_device.py
@@ -449,6 +449,33 @@ class DeviceTestCase(unittest.HomeserverTestCase):
             ],
         )
 
+    def test_delete_device_removes_refresh_tokens(self) -> None:
+        """Deleting a device should also purge any refresh tokens for it."""
+        self._record_users()
+
+        self.get_success(
+            self.store.add_refresh_token_to_user(
+                user_id=user1,
+                token="refresh_token",
+                device_id="abc",
+                expiry_ts=None,
+                ultimate_session_expiry_ts=None,
+            )
+        )
+
+        self.get_success(self.handler.delete_devices(user1, ["abc"]))
+
+        remaining_refresh_token = self.get_success(
+            self.store.db_pool.simple_select_one(
+                table="refresh_tokens",
+                keyvalues={"user_id": user1, "device_id": "abc"},
+                retcols=("id",),
+                desc="get_refresh_token_for_device",
+                allow_none=True,
+            )
+        )
+        self.assertIsNone(remaining_refresh_token)
+
 
 class DehydrationTestCase(unittest.HomeserverTestCase):
     servlets = [