Maurice be751ad521 fix(auth): start no new session for a password change over a Bearer token ...

A password change ends every session of the user and re-issues one for
the device it was made on, handed out as the session cookie. A caller
that authenticated with a Bearer token never reads that cookie, so the
new session sat in the session list as a live device nobody held until
it expired.

The controller now asks for the replacement session only when the
request came with the session cookie, the same check the sliding
renewal makes. The response body is unchanged.

2026-10-08 18:44:08 +02:00

..

assets

fix(atlas): correct Guangdong Province name in region bundle

2026-09-08 16:36:47 +02:00

eslint-rules

Feat/orm : mikroorm (#2416)

2026-10-06 19:27:30 +02:00

public

v3.0.16 — bug fixes (#964)

2026-05-06 21:38:40 +02:00

scripts

refactor(auth): check sessions through SessionsService, not its repository

2026-10-08 18:43:50 +02:00

src

fix(auth): start no new session for a password change over a Bearer token

2026-10-08 18:44:08 +02:00

tests

fix(auth): start no new session for a password change over a Bearer token

2026-10-08 18:44:08 +02:00

.env.example

docs(server): keep the managed-hosting switches out of the env reference

2026-10-08 18:41:01 +02:00

.gitignore

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

.prettierrc

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

CLAUDE.md

fix(sessions): keep an ended session's row until it expires

2026-10-08 18:44:08 +02:00

eslint.config.mjs

refactor(db): drop the unused raw document provider seeder

2026-10-08 18:39:34 +02:00

package.json

feat(server): gate writes outside a transaction with lint:tx

2026-10-08 18:41:57 +02:00

reset-admin.js

feat(auth): track sign-in sessions so a session can end before it expires

2026-10-08 18:43:06 +02:00

tsconfig.build.json

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

tsconfig.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

tsconfig.scripts.json

ci: probe the server's SQL against a Postgres service

2026-10-08 18:39:34 +02:00

tsconfig.tests.json

v4.0.0 (#1719)

2026-08-27 13:22:39 +02:00

vitest.config.ts

feat(auth): track sign-in sessions so a session can end before it expires

2026-10-08 18:43:06 +02:00