Context:

• When the application starts, local users are added to the database through db.CreateLocalUsers.
• If a user already exists and has an access token, it gets removed.
• This breaks access token auth when gemfast is run in environments where its container is expected to be ephemeral.

e.g.

Access token added for user and can be seen in DB:

Server restarted and access token is removed:

Changes:

• Update CreateLocalUsers method to fetch local users & only update password, role, and type fields, instead of replacing the whole user
• Add tests to check that the token is available on the user when the CreateLocalUsers method is run twice