finnandClaude Opus 5.5
ca023e705c
Session.clear() set the id to None before clearing, so on_update assigned a new id and save_session deleted the store entry of that new id. The entry of the old id with the user_id stayed valid: a copied cookie survived the logout, and a session "logged out" by the auth middleware for a disabled user was valid again after re-enabling. - Session.clear() now removes the store entry of the current id. - Deactivating a user removes all of their sessions immediately, like deleting a user does. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
MAX
A small little program to manage emails.
The proxy should add X-Real-IP to get a better logging.
Setup
Requirements: Docker, Make
Start with make run-dev
Configuration
MAX_ORIGIN(required in production): The public origin of MAX, e.g.https://max.finn.st