This repository has been archived on 2024-06-09. You can view files and clone it, but you cannot make any changes to it's state, such as pushing and creating new issues, pull requests or comments.

Eugen Rochko 8532429af7 Fix 2FA/sign-in token sessions being valid after password change (#14802) ... If someone tries logging in to an account and is prompted for a 2FA code or sign-in token, even if the account's password or e-mail is updated in the meantime, the session will show the prompt and allow the login process to complete with a valid 2FA code or sign-in token		2020-11-12 23:05:01 +01:00
..
challenges_controller.rb	Add password challenge to 2FA settings, e-mail notifications (#11878)	2019-09-18 16:37:27 +02:00
confirmations_controller.rb	Fix wrong variable regression from #11753 (#11763)	2019-09-05 06:13:50 +02:00
omniauth_callbacks_controller.rb	Change unconfirmed user login behaviour (#11375)	2019-07-22 10:48:50 +02:00
passwords_controller.rb	Fix other sessions not being logged out on password change (#14252)	2020-07-07 15:26:31 +02:00
registrations_controller.rb	Add IP-based rules (#14963)	2020-10-12 16:33:49 +02:00
sessions_controller.rb	Fix 2FA/sign-in token sessions being valid after password change (#14802)	2020-11-12 23:05:01 +01:00
setup_controller.rb	Change unconfirmed user login behaviour (#11375)	2019-07-22 10:48:50 +02:00