Kill Remember-Me Tokens with Sessions #174

New issue

Closed

opened 2025-09-16 08:32:47 -04:00 by rainbownapkin · 5 comments

rainbownapkin commented

2025-09-16 08:32:47 -04:00

(Migrated from gitlab.com)

Users who logout should have any remember-me tokens associated with the request cleared from the DB.

Users who request a full-logout should have all associated remember-me tokens cleared.

Full session kill method should have option to leave remember-me tokens, for certain calls, such as in the advent of a rank change.

Users who logout should have any remember-me tokens associated with the request cleared from the DB. Users who request a full-logout should have all associated remember-me tokens cleared. Full session kill method should have option to leave remember-me tokens, for certain calls, such as in the advent of a rank change.

rainbownapkin commented

2025-09-16 08:32:48 -04:00

(Migrated from gitlab.com)

added #167 as parent issue

rainbownapkin commented

2025-09-16 08:35:07 -04:00

(Migrated from gitlab.com)

changed the description

rainbownapkin added a new dependency 2025-09-25 05:41:14 -04:00

#167 Remember-Me Cookies

rainbownapkin commented

2025-10-20 07:53:42 -04:00

Owner

Old keys are cleared on next login, to prevent doubled keys, and to allow users to who un-check 'remember me' to delete their token: e00e5a608b

We should still implement rememberme cookie detection and token db doc deletion from logout controller too, since a user requesting a logout shouldn't have to log back in manually just to delete their key.

Old keys are cleared on next login, to prevent doubled keys, and to allow users to who un-check 'remember me' to delete their token: e00e5a608b We should still implement rememberme cookie detection and token db doc deletion from logout controller too, since a user requesting a logout shouldn't have to log back in manually just to delete their key.

rainbownapkin commented

2025-10-21 00:23:43 -04:00

Owner

Server now deletes associated remember-me token on user requested log-outs: 1d5a087d79

Server now deletes associated remember-me token on user requested log-outs: 1d5a087d79

rainbownapkin commented

2025-10-21 08:12:16 -04:00

Owner

Remember me tokens now nuked upon full account logout: bc0657a702
Cleaned up remember-me error handling: d874f5e2da

Remember Me Tokens Complete.

Remember me tokens now nuked upon full account logout: bc0657a702 Cleaned up remember-me error handling: d874f5e2da Remember Me Tokens Complete.

rainbownapkin closed this issue