Jeremy Daer 58a25c6281 End sign-in links made before a password change ...

A transfer link signed only the user id, so one copied before the
password changed still started a session for up to four hours after.
Bind it to the password salt with generates_token_for, so a new
password ends those links too. Links made before this upgrade stop
working; they last four hours at most.

From #371.

(cherry picked from commit 160ba295b5)

2026-10-19 11:37:05 -07:00

..

assets

Keep the message body list styles out of the mention menu

2026-09-26 11:16:03 +02:00

channels

Keep same-second unread events and bound idle push connections

2026-10-07 11:00:47 +02:00

controllers

Give the changing browser a new session rather than keeping its own

2026-10-19 10:46:24 -07:00

helpers

Link URLs only in a message's text

2026-10-17 00:46:37 -07:00

javascript

Quote a mention as text when replying

2026-10-17 00:46:37 -07:00

jobs

Merge pull request #329: Delete a room's messages in a job, one transaction each

2026-10-07 10:33:57 +02:00

models

End sign-in links made before a password change

2026-10-19 11:37:05 -07:00

views

Link URLs only in a message's text

2026-10-17 00:46:37 -07:00