Tells open pages of a revocation made through Ash, outside Macaw.Auth.

Macaw.Auth.revoke/2 tells a user's open LiveViews which of their sessions ended, and they disconnect at once. But a host on Ash may revoke a token without it: AshAuthentication's sign-out revokes by token, an admin action may revoke by jti, log-out-everywhere revokes them all. Without this notifier those pages would learn only at their next re-check (Macaw.Auth.Live, every minute by default). The host adds it to the token resource, which Macaw.Auth.Ash.TokenResource insists on:

use Ash.Resource, ..., notifiers: [Macaw.Auth.Ash.Notifier]

On every notification whose record is now a revocation (purpose "revocation"), it tells the token's user's open pages {:sessions_revoked, [jti]}: the jti is a Macaw.Auth.Ash session's id. Revocations made with the quiet/0 context are not announced. Two actions are left to others, so a page is told once: Macaw's own revocation (:macaw_auth_revoke), which Macaw.Auth.revoke/2 announces, and revoke_all_stored_for_subject, a bulk update that sends no notifications, which Macaw.Auth.Ash.AnnounceRevocation announces.

How it tells them: Macaw.Auth.announce_revoked/2 (macaw_auth 0.1.1), the public way to tell a user's open pages that sessions ended, over whichever channel macaw_auth is configured with (a Registry, or Phoenix.PubSub). It does so only while Macaw.Auth.Ash is the configured backend; under another backend these tokens are not Macaw sessions.

Notifications arrive after the transaction commits.