Skip to content

fix: delete all sessions on password change #4659

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Oct 20, 2022
Merged

fix: delete all sessions on password change #4659

merged 1 commit into from
Oct 20, 2022

Conversation

sreya
Copy link
Collaborator

@sreya sreya commented Oct 20, 2022

  • Prevent users from reusing their old password as their new password.

fixes #4196
fixes #3287

@sreya
fix: delete all sessions on password change
2ee803a 
- Prevent users from reusing their old password
  as their new password.
@sreya sreya requested a review from coadler October 20, 2022 00:40
@sreya sreya merged commit 7a5ae1e into main Oct 20, 2022
@sreya sreya deleted the jon/chpwd branch October 20, 2022 02:12
@github-actions github-actions bot locked and limited conversation to collaborators Oct 20, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
1 more reviewer

@coadler coadler coadler approved these changes

Reviewers whose approvals may not affect merge requirements
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Sessions are not logged out when password is changed Update password: New password can be the same as old password
2 participants
@sreya @coadler