ryan 26e12594a2 fix(user): revoke all sessions and access tokens on password change ...

- Store user password hash in session during login

- Validate password hash compatibility on requests to prevent session reuse

- Revoke all user access tokens and clear session on ChangePassword

2026-06-13 10:27:28 +08:00

..

admin

fix(logs): restrict websocket origin to prevent cswsh (LOG-2)

2026-06-13 10:25:25 +08:00

cap

质量优化

2026-06-10 13:50:58 +08:00

config

精简

2026-06-10 11:33:33 +08:00

custom

更新示例

2026-06-10 15:11:42 +08:00

health

精简

2026-06-10 11:33:33 +08:00

oauth

fix(user): revoke all sessions and access tokens on password change

2026-06-13 10:27:28 +08:00

risk_control

框架表改名 w_{name}

2026-06-11 09:27:15 +08:00

upload

fix(upload): restrict cross-user private file access (UPLOAD-1)

2026-06-13 10:13:41 +08:00

user

fix(user): revoke all sessions and access tokens on password change

2026-06-13 10:27:28 +08:00