c4a3593241
- invalidateOtherSessions() in authService.js: deletes all sessions except current - Password change (auth.js + profile.js) now invalidates all other sessions - Password change rotates current session ID (sets new cookie) - New POST /api/auth/logout-all endpoint (deletes all sessions + clears cookie) - Audit logging for logout.all and password.change - Added last_password_change_at to auth.js change-password for consistency - Hudson security audit: 6/6 PASS |
||
|---|---|---|
| .. | ||
| auditService.js | ||
| authService.js | ||
| backupScheduler.js | ||
| backupService.js | ||
| cleanupService.js | ||
| notificationService.js | ||
| oidcService.js | ||
| spreadsheetImportService.js | ||
| statusRuntime.js | ||
| statusService.js | ||
| userDbImportService.js | ||