Jeremy Daer 58a25c6281 End sign-in links made before a password change ...

A transfer link signed only the user id, so one copied before the
password changed still started a session for up to four hours after.
Bind it to the password salt with generates_token_for, so a new
password ends those links too. Links made before this upgrade stop
working; they last four hours at most.

From #371.

(cherry picked from commit 160ba295b5)

2026-10-19 11:37:05 -07:00

..

account

Hello world

2025-08-21 09:31:59 +01:00

message

Bound accessible search probes and reject invalid benchmark responses

2026-10-07 14:22:07 +02:00

opengraph

Clear no_proxy in the link preview proxy test

2026-10-17 01:11:38 -07:00

push

Count unread rooms for push badges once per batch

2026-10-05 16:49:59 +02:00

room

Stop sending push notifications to banned users (#338)

2026-10-07 11:25:16 -07:00

rooms

Find a direct room with one query instead of checking every one

2026-10-05 04:06:17 +02:00

user

End sign-in links made before a password change

2026-10-19 11:37:05 -07:00

.keep

Hello world

2025-08-21 09:31:59 +01:00

account_test.rb

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

action_text_attachment_test.rb

Mint the tampered sgid without extending a Room

2026-09-20 11:19:14 -04:00

first_run_test.rb

Hello world

2025-08-21 09:31:59 +01:00

membership_test.rb

Hello world

2025-08-21 09:31:59 +01:00

message_test.rb

Remove trailing whitespace

2026-10-05 16:30:18 +02:00

room_test.rb

Reset former members' connections and grant open rooms in one statement

2026-10-06 14:45:18 +02:00

user_test.rb

Close live connections on the transaction that changed the password

2026-10-19 10:57:49 -07:00

webhook_test.rb

Post a webhook reply as an attachment only when the bot answered 200

2026-10-05 02:58:11 +02:00