1
0
mirror of https://github.com/BookStackApp/BookStack.git synced 2026-10-23 06:49:01 +03:00
Files
bookstack/app/Users
Dan Brown e07a3009b4 Users: Refresh remember me token on password change
Refreshes the remember me token on password change, so that existing
remember-me sessions are dropped.
This helps invalidate existing remember-me access in scenarios where
passwords are being changed after unauthorized access.
Added test to cover.

Thanks to Semilore Osofisan for responsibly reporting this scenario.
2026-10-14 13:18:21 +01:00
..