mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
c5d0672c68
An administrator resets a password to close an account someone else took over, but the API tokens stayed valid: a stolen token kept working with the new password, for as long as it was made to last. Setting a password on the user's Password page now deletes that user's tokens, and the page says so. A user who changes their own password keeps their tokens (scripts keep working); they can delete them on their profile. |
||
|---|---|---|
| .. | ||
| migrations | ||
| templates/admin | ||
| tests | ||
| __init__.py | ||
| apps.py | ||
| decorators.py | ||
| forms.py | ||
| models.py | ||
| permissions.py | ||
| urls.py | ||
| views.py | ||