null c4a3593241 v0.22.2: Session Token Rotation on Auth Events ... - invalidateOtherSessions() in authService.js: deletes all sessions except current - Password change (auth.js + profile.js) now invalidates all other sessions - Password change rotates current session ID (sets new cookie) - New POST /api/auth/logout-all endpoint (deletes all sessions + clears cookie) - Audit logging for logout.all and password.change - Added last_password_change_at to auth.js change-password for consistency - Hudson security audit: 6/6 PASS		2026-05-10 03:55:14 -05:00
..
utils.js	initial commit	2026-05-03 19:51:57 -05:00
version.js	v0.22.2: Session Token Rotation on Auth Events	2026-05-10 03:55:14 -05:00