Add session management features: implement user session revocation on password change, enhance session validation, and update UI for password change functionality

2026-06-01 23:11:00 +02:00
parent e4d55f4c90
commit 43c47bca6d
13 changed files with 472 additions and 200 deletions
--- a/handlers/users.php
+++ b/handlers/users.php
@ -232,6 +232,8 @@ case 'PATCH':
                'UPDATE users SET passwordHash = :h, mustChangePassword = :mcp WHERE userID = :uid'
            )->execute([':h' => $hash, ':mcp' => $mustChange, ':uid' => $targetUserID]);

+            token_revoke_all_for_user_on_pdo($pdo, $targetUserID);
+
            qdb_save($tmpDb, $lockFp);

            json_success([