Merge branch 'main' into lmendoza/PD-3931

Author: amontenegro

CHANGELOG.md

@@ -1,3 +1,7 @@
+## v2.140.3 - 2026-04-27
+
+[Full Changelog](https://github.com/ORCID/ORCID-Source/compare/v2.140.2...v2.140.3)
+
 ## v2.140.2 - 2026-04-27
 
 [Full Changelog](https://github.com/ORCID/ORCID-Source/compare/v2.140.1...v2.140.2)

orcid-persistence/src/main/resources/db-master.xml

@@ -426,5 +426,6 @@
   <include file="/db/updates/add_redirect_uri_metadata_to_client_redirect_uri.xml" />
   <include file="/db/updates/add_unsent_notification_partial_index_on_notification.xml" />
   <include file="/db/updates/alter_oauth2_authoriziation_code_detail_attributes.xml" />
+  <include file="/db/updates/add_oauth2_token_detail_lookup_idx.xml" />
   <include file="/db/updates/dw_alter_dw_notification_assertion_origin_client.xml" />
 </databaseChangeLog>

orcid-persistence/src/main/resources/db/updates/add_oauth2_token_detail_lookup_idx.xml

@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<databaseChangeLog
+    xmlns="http://www.liquibase.org/xml/ns/dbchangelog"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="http://www.liquibase.org/xml/ns/dbchangelog
+                        http://www.liquibase.org/xml/ns/dbchangelog/dbchangelog-3.3.xsd">
+
+    <changeSet id="ADD-OAUTH2-TOKEN-DETAIL-LOOKUP-IDX"
+               author="gwestwood"
+               dbms="postgresql"
+               runInTransaction="false">
+        <preConditions onFail="MARK_RAN">
+            <not>
+                <indexExists indexName="oauth2_token_detail_authkey_orcid_client_expiration_idx"
+                             tableName="oauth2_token_detail" />
+            </not>
+        </preConditions>
+        <sql>
+            CREATE INDEX CONCURRENTLY oauth2_token_detail_authkey_orcid_client_expiration_idx
+              ON oauth2_token_detail
+                 (authentication_key, user_orcid, client_details_id, token_expiration DESC);
+        </sql>
+        <rollback>
+            <sql>DROP INDEX CONCURRENTLY IF EXISTS oauth2_token_detail_authkey_orcid_client_expiration_idx;</sql>
+        </rollback>
+    </changeSet>
+
+</databaseChangeLog>