]> git.openstreetmap.org Git - rails.git/commitdiff
Invalidate existing sessions when changing email or password
authorTom Hughes <tom@compton.nu>
Tue, 29 Sep 2020 13:22:51 +0000 (14:22 +0100)
committerTom Hughes <tom@compton.nu>
Tue, 29 Sep 2020 13:34:08 +0000 (14:34 +0100)
As we don't have any way to actually find the active sessions for
an account we instead store a fingerprint in the session, and refuse
to use any session with a different fingerprint.


No differences found