stable
Clone or download
Read-only
request #12219: Reset passord links are not invalidated on password change
Reset tokens and sessions are now invalidated when the password of an account is changed. This limit persistence of accesses in case of a compromission. Change-Id: Ibf94d4b1e269f2775524975de63417f34e2db2d6
Modified Files
| Name | ||||
|---|---|---|---|---|
| M | src/common/autoload.php | +4 | −2 | Go to diff View file |
| M | src/common/dao/SessionDao.class.php | +10 | −1 | Go to diff View file |
| A | src/common/user/Password/Change/PasswordChangeException.php | +25 | −0 | Go to diff View file |
| A | src/common/user/Password/Change/PasswordChanger.php | +65 | −0 | Go to diff View file |
| M | src/common/user/SessionManager.php | +12 | −1 | Go to diff View file |
| M | src/www/account/change_pw.php | +15 | −7 | Go to diff View file |
| M | src/www/admin/usergroup.php | +12 | −6 | Go to diff View file |
| A | tests/phpunit/common/User/Change/PasswordChangerTest.php | +83 | −0 | Go to diff View file |