Jakub Zych 557c03c595 fix: a password change or ban ends authorized device sessions ...

The device hand-over now refuses a session authorized before the user's
tokens_valid_after, and every AccessRevokedEvent revokes the user's
pending and confirmed device sessions inside the write's transaction
(classes.RevokeDeviceSessions).

2026-10-26 16:08:20 +01:00

6.6 KiB

Raw Blame History

View Raw