Actions
Epic #40
openFailure to Invalidate Session After Password Change
Status:
New
Priority:
Medium
Assignee:
-
Target version:
-
Start date:
01/05/2026
Due date:
% Done:
0%
Estimated time:
(Total: 0:00 h)
Work Type:
Platform
Technical Area:
Release Narrative:
Description
Objective:
Ensure that all active sessions associated with a user account are invalidated immediately after a password change to prevent unauthorized access using old credentials.
Covers:
1. Session lifecycle management
2. Token invalidation
3. User-controlled session handling
4. Protection against session hijacking after password updates
Actions