Vishnu NarayananandVishnu Narayanan fcf660b7d9 fix: evict untracked legacy tokens before tracked sessions ...

During the rollout window, tracked sessions are newer than any
pre-existing legacy tokens. The previous logic walked user_sessions
first and would kill the only tracked session while leaving older
legacy tokens alive. Drop untracked tokens first when there is a
gap between user_sessions count and user.tokens size.

2026-06-02 13:11:58 +05:30

..

confirmations_controller.rb

fix: DEPRECATION WARNING: Rendering actions with '.' in the name is deprecated (#5560)

2022-10-05 17:24:34 -07:00

omniauth_callbacks_controller.rb

chore: rotate oauth password if unconfirmed (#13878)

2026-04-02 11:26:29 +05:30

passwords_controller.rb

fix: Prevent user enumeration on password reset endpoint (#13528)

2026-02-13 13:45:40 +05:30

sessions_controller.rb

fix: evict untracked legacy tokens before tracked sessions

2026-06-02 13:11:58 +05:30

token_validations_controller.rb

chore: Enable the new Rubocop rules (#7122)

2023-05-19 14:37:10 +05:30