mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 11:16:47 +00:00
An administrator resets a password to close an account someone else took over, but the API tokens stayed valid: a stolen token kept working with the new password, for as long as it was made to last. Setting a password on the user's Password page now deletes that user's tokens, and the page says so. A user who changes their own password keeps their tokens (scripts keep working); they can delete them on their profile. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| test_audit_rows.py | ||
| test_logs_page.py | ||
| test_tombstones.py | ||
| test_user_create.py | ||
| test_user_pages.py | ||
| test_user_update_next.py | ||
| test_views.py | ||