Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-01-24 | Fix password change/reset not immediately invalidating other sessions (#12928) | Eugen Rochko | |
While making browser requests in the other sessions after a password change or reset does not allow you to be logged in and correctly invalidates the session making the request, sessions have API tokens associated with them, which can still be used until that session is invalidated. This is a security issue for accounts that were already compromised some other way because it makes it harder to throw out the hijacker. | |||
2018-07-31 | Compensate for scrollbar disappearing when media modal visible (#8100) | Eugen Rochko | |
* Compensate for scrollbar disappearing when media modal visible Make auth pages backgrounds lighter * Fix typo | |||
2017-08-03 | Redirect to PasswordController#new when reset_password_token is invalid (#4506) | nullkal | |
2016-11-15 | Fix rubocop issues, introduce usage of frozen literal to improve performance | Eugen Rochko | |
2016-03-26 | Remember user logins by default | Eugen Rochko | |
2016-03-05 | Customizing devise views and controllers | Eugen Rochko | |