finnandClaude Opus 5.5
7ac4e6c3a7
remove_user_sessions() got the user id as except_id, so the exception never matched. On an own password change the result was correct only by accident. When an admin changed another user's password, the admin session got a new id, but the old entry stayed valid in the store. - New Session.regenerate(): keeps the data under a new id and removes the old store entry. - change_password() handles the sessions: on an own password change it regenerates the current session and ends all other sessions of the user (except_id is now the session id). When an admin changes another user's password, the admin session stays untouched and all sessions of that user end. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
MAX
A small little program to manage emails.
The proxy should add X-Real-IP to get a better logging.
Setup
Requirements: Docker, Make
Start with make run-dev
Configuration
MAX_ORIGIN(required in production): The public origin of MAX, e.g.https://max.finn.st