Jeremy Daer 9ca680de02 Sign the browser out when its new session is refused after a password change ...

If the password changes again between this browser's change and its new session, that session is refused, and the browser is sent to sign in instead of an error.

(cherry picked from commit a476cbfa24)

2026-10-20 20:45:36 -07:00

..

channels

Keep same-second unread events and bound idle push connections

2026-10-07 11:00:47 +02:00

controllers

Sign the browser out when its new session is refused after a password change

2026-10-20 20:45:36 -07:00

fixtures

Hash fixture passwords at minimum bcrypt cost

2026-09-29 09:53:39 +07:00

helpers

Link URLs only in a message's text

2026-10-17 00:46:37 -07:00

integration

Allow an asset host only up to its own asset directory

2026-10-17 00:47:41 -07:00

lib

Keep same-second unread events and bound idle push connections

2026-10-07 11:00:47 +02:00

middleware

Keep a multi-range upload response's multipart type

2026-10-17 00:47:32 -07:00

models

Refuse a session for a password that changed after it was checked

2026-10-20 20:45:36 -07:00

performance

Hello world

2025-08-21 09:31:59 +01:00

script/admin

Ask for the current password to change it

2026-10-19 12:17:27 -07:00

system

Post the browser's push subscription from every page, and register it once

2026-10-19 13:15:14 -07:00

test_helpers

Reuse push connections pinned to the address the guard just approved

2026-10-05 18:24:41 +02:00

application_system_test_case.rb

Replace Trix with Lexxy

2026-09-26 09:13:27 +02:00

test_helper.rb

Update Rails to main

2026-10-05 11:45:37 -04:00