#31179: Using the "forgot password" mechanism doesn't invalidate other sessions
-------------------------------------+-------------------------------------
Reporter: Mike Lissner | Owner: Rishabh
| Verma
Type: Bug | Status: closed
Component: contrib.auth | Version: master
Severity: Normal | Resolution: invalid
Keywords: forgot password, | Triage Stage: Accepted
reset password, sessions logs out |
Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Comment (by Mike Lissner):
Curious. I thought I reproduced it too, but perhaps I didn't do my test
properly. I'm checking with the vulnerability reporter if he can reproduce
it and will reopen if there's some subtlety we've missed (I suspect not!).
Thanks for the response and sorry for taking your time.
--
Ticket URL: <https://code.djangoproject.com/ticket/31179#comment:4>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/066.a7ace800f167bfa1e04ee8d0d2a9adf8%40djangoproject.com.
