BillTracker/routes
null c4a3593241 v0.22.2: Session Token Rotation on Auth Events
- invalidateOtherSessions() in authService.js: deletes all sessions except current
- Password change (auth.js + profile.js) now invalidates all other sessions
- Password change rotates current session ID (sets new cookie)
- New POST /api/auth/logout-all endpoint (deletes all sessions + clears cookie)
- Audit logging for logout.all and password.change
- Added last_password_change_at to auth.js change-password for consistency
- Hudson security audit: 6/6 PASS
2026-05-10 03:55:14 -05:00
..
about.js push 2026-05-04 20:12:57 -05:00
aboutAdmin.js v0.20.1: code splitting, version badge on roadmap, roadmap nav link 2026-05-09 22:01:19 -05:00
admin.js v0.20.6: Audit logging for critical operations 2026-05-10 00:03:12 -05:00
analytics.js v0.22.1: N+1 Query Optimization 2026-05-10 03:29:09 -05:00
auth.js v0.22.2: Session Token Rotation on Auth Events 2026-05-10 03:55:14 -05:00
authLogin.js v0.20.6: Audit logging for critical operations 2026-05-10 00:03:12 -05:00
authOidc.js initial commit 2026-05-03 19:51:57 -05:00
bills.js v0.20.8: Billing cycle sub-categories + server-side cycle_day validation 2026-05-10 00:39:11 -05:00
calendar.js push 2026-05-09 13:03:36 -05:00
categories.js push 2026-05-09 13:03:36 -05:00
export.js push 2026-05-09 13:03:36 -05:00
import.js push 2026-05-09 13:03:36 -05:00
monthly-starting-amounts.js push 2026-05-04 20:12:57 -05:00
notifications.js initial commit 2026-05-03 19:51:57 -05:00
payments.js v0.20.5: Bulk payment input validation 2026-05-09 23:41:28 -05:00
profile.js v0.22.2: Session Token Rotation on Auth Events 2026-05-10 03:55:14 -05:00
settings.js push 2026-05-09 13:03:36 -05:00
status.js initial commit 2026-05-03 19:51:57 -05:00
summary.js push 2026-05-04 20:12:57 -05:00
tracker.js v0.22.1: N+1 Query Optimization 2026-05-10 03:29:09 -05:00
user.js push 2026-05-09 13:03:36 -05:00
version.js initial commit 2026-05-03 19:51:57 -05:00