AppFlowy-IO / AppFlowy-IO/AppFlowy
[FR] Question / Feature Request: SECURITY - Sessions remain active across devices after password change
- Ngôn ngữ chính
- Dart
- Star
- 76.6k
- Fork
- 6k
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
### Description
Hello AppFlowy Team and Community,
I noticed that when a user changes their account password, other currently logged-in devices (such as web, desktop PCs or the mobile app) remain authenticated and can continue to access the data without being forced to log out or re-authenticate.
Thank you for this amazing project!
### Impact
This is a significant security flaw. If a user's account is compromised or a device is lost/stolen, changing the password does not protect the account, as the unauthorized person or device will maintain full access indefinitely.
### Additional Context
_No response_
Hướng dẫn đóng góp
Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này
Đánh giá
Issue này chưa được đánh giá.