Affected API:
GET /users
Expected behaviour:
Only return existing users.
Actual Behavior:
returns existing users and a user deleted several days ago.
Environment:
I have only tested this in a sandbox environment.
We deleted a user because we hit the max of 3 available users on the sandbox environment, and needed to grant another user access.
Steps to reproduce:
Delete a user. Call the /users api with a get request. See that the deleted user is still listed.