Git Merge Request #440: Track sessions for already logged in users (open)
Merging...
Merged
Something went wrong. Please, merge manually
Checking if merge is possible...
Something went wrong. Please, merge manually
Carlos Cruz wants to merge 1 commit from /u/ccruz/allura/ to master, 18 hours ago
- If the
auth.reject_untracked_sessionssetting is enabled to enforce session tracking, already logged in users would have their sessions invalidated and logged out. Update fixes this issue by tracking the current session for a logged in user that has not had any previous session tracked. - Fixed an issue that would cause an invalidated session to completely log out a user, including clearing their CSRF login token, then after trying to log in again, a 403 page would be displayed.
| Commit | Date | |
|---|---|---|
| 2025-07-18 17:45:11 | Tree |
Carlos Cruz