Scott Gress
92135b691d
# Checklist for submitter If some of the following don't apply, delete the relevant line. - [X] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. ## Testing - [X] Added/updated automated tests - [X] QA'd all new/changed functionality manually - After doing a "forgot password", then logging in and changing password manually, the "reset password" link I received no longer allows resetting password - Changing my password via the UI clears the my session and forces re-login - Changing another user's password via the UI clears their session and forces re-login - Upon first login for a new user, after forced password change, user's session is _not_ cleared (they continue to home screen as expected) - After clicking "require password reset" for a user, logging in as that user, and changing password, user's session is _not_ cleared (they continue to home screen as expected)
1 line
96 B
Plaintext
1 line
96 B
Plaintext
- User sessions and password reset tokens are now cleared whenever a user's password is changed. |