pub async fn idle_sso_users(
pool: &PgPool,
actor: &Actor,
) -> AppResult<Vec<IdleSsoUser>>Expand description
Active single sign-on users without a sign-in or token use for
IDLE_SSO_DAYS who still hold memberships, tokens or check-outs –
candidates for Offboard and deactivate. Bounded by MAX_LIST.
§Invariants
- Permission: administrators (403 otherwise).
- Data: read-only; counts over every group (management data, also of need-to-know groups); the clock of the database decides what is idle.