4 Commits

Author	SHA1	Message	Date
RaresKeY	12615aefa6	fix(auth): clean up rename and null-owner ownership (#4340)	2026-06-16 03:33:02 +01:00
Alexandre Teixeira	c8e26249d3	refactor(tests): reuse import-state helper in auth tests ... Test-only refactor continuing #2523. Replaces a repeated core.auth cache eviction pattern in three auth tests with the shared clear_module helper, preserving behavior.	2026-06-05 11:10:41 +01:00
pewdiepie-archdaemon	90b64f32c9	Stabilize auth session revocation tests	2026-06-02 06:02:49 +09:00
Alexandre Teixeira	6023c85559	Revoke stale sessions after password change ... After a successful password change, revoke all browser sessions for the same user except the one that submitted the request. This prevents stale sessions on other devices from remaining valid after credentials are updated. Keep API-token behavior unchanged. The current browser session is preserved so the user can continue from the tab that changed the password. Add focused regression tests for preserving the current session, revoking other sessions, persisting revocation, and avoiding revocation when the current password is incorrect.	2026-06-02 05:59:22 +09:00