mastodon

Author	SHA1	Message	Date
Eugen Rochko	daf71573d0	Fix password change/reset not immediately invalidating other sessions (#12928 ) While making browser requests in the other sessions after a password change or reset does not allow you to be logged in and correctly invalidates the session making the request, sessions have API tokens associated with them, which can still be used until that session is invalidated. This is a security issue for accounts that were already compromised some other way because it makes it harder to throw out the hijacker.	2020-01-24 00:20:38 +01:00
Eugen Rochko	60df87f6f0	Compensate for scrollbar disappearing when media modal visible (#8100 ) * Compensate for scrollbar disappearing when media modal visible Make auth pages backgrounds lighter * Fix typo	2018-07-31 01:14:33 +02:00
nullkal	dfcd2834f9	Redirect to PasswordController#new when reset_password_token is invalid (#4506 )	2017-08-03 17:45:45 +02:00
Eugen Rochko	fdc17bea58	Fix rubocop issues, introduce usage of frozen literal to improve performance	2016-11-15 16:56:29 +01:00
Eugen Rochko	43bb8a25e7	Remember user logins by default	2016-03-26 01:14:37 +01:00
Eugen Rochko	6045b6cb18	Customizing devise views and controllers	2016-03-05 22:43:05 +01:00