Uh oh!
There was an error while loading. Please reload this page.
Invalidate AccessTokens on password change [2.x] - #3021
Conversation
Invalidate all existing sessions (delete all access tokens) after user's password was changed.
238cab0 to
4ee086dComparepelim
commented
Jan 4, 2017
this change results in invalidating the tokens on User.save() - please revert this change v2.36.0 works finde for me |
bajtos
commented
Jan 4, 2017
bajtos
commented
Jan 4, 2017
@bajtos I have experienced the same issue, calling User.save() remove all current access tokens even not change user email or password. in common/models/user.js: |
bajtos
commented
Jan 20, 2017
@icy90 I see. Please open a new github issue for this problem, so that we can move the discussion there, and mention my handle there so that I get email notification. |
Invalidate all existing sessions (delete all access tokens) after user's password was changed.
This is a back-port of #3018
Connect to strongloop-internal/scrum-loopback#925
cc @loay