AppFlowy-IO / AppFlowy-IO/AppFlowy

[FR] Question / Feature Request: SECURITY - Sessions remain active across devices after password change

未关闭
#8,839 1 条评论 1 个 reaction 已指派 1 人 已被 @LucasXu0 认领 在 GitHub 查看
Q3 26
主要语言
Dart
星标
76.6k
派生
6k
PR 合并指标
30 天内没有已合并 PR

描述

### Description

Hello AppFlowy Team and Community,

I noticed that when a user changes their account password, other currently logged-in devices (such as web, desktop PCs or the mobile app) remain authenticated and can continue to access the data without being forced to log out or re-authenticate.

Thank you for this amazing project!

### Impact

This is a significant security flaw. If a user's account is compromised or a device is lost/stolen, changing the password does not protect the account, as the unauthorized person or device will maintain full access indefinitely.

### Additional Context

_No response_

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。