[PR #2076] [MERGED] fix: invalidate sessions on password reset and update #2033

New issue

Closed

opened 2026-02-26 20:32:08 +03:00 by kerem · 0 comments

kerem commented

2026-02-26 20:32:08 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/documenso/documenso/pull/2076
Author: @ephraimduncan
Created: 10/15/2025
Status: ✅ Merged
Merged: 12/8/2025
Merged by: @dguyen

Base: main ← Head: fix/session-invalidation-password-reset

📝 Commits (4)

d70ea9c fix: invalidate sessions on password reset and update
28865c2 chore: update the tests
e12b5ef Merge branch 'main' into fix/session-invalidation-password-reset
80b20b2 chore: refactor

📊 Changes

4 files changed (+183 additions, -6 deletions)

View changed files

📝 packages/app-tests/e2e/fixtures/authentication.ts (+13 -1)
📝 packages/app-tests/e2e/user/password.spec.ts (+118 -2)
📝 packages/auth/server/routes/email-password.ts (+48 -3)
📝 packages/lib/server-only/user/reset-password.ts (+4 -0)

📄 Description

Description

This PR fixes a bug where user sessions remained active after password reset or update. Previously, when users changed their password (either through forgot password flow or settings), existing sessions were not invalidated.

Checklist

I have tested these changes locally and they work as expected.
I have added/updated tests that prove the effectiveness of these changes.
I have updated the documentation to reflect these changes, if applicable.
I have followed the project's coding style guidelines.
I have addressed the code review feedback from the previous submission, if applicable.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/documenso/documenso/pull/2076 **Author:** [@ephraimduncan](https://github.com/ephraimduncan) **Created:** 10/15/2025 **Status:** ✅ Merged **Merged:** 12/8/2025 **Merged by:** [@dguyen](https://github.com/dguyen) **Base:** `main` ← **Head:** `fix/session-invalidation-password-reset` --- ### 📝 Commits (4) - [`d70ea9c`](https://github.com/documenso/documenso/commit/d70ea9c6a77a129f3314d1f06a5c5511f9a66438) fix: invalidate sessions on password reset and update - [`28865c2`](https://github.com/documenso/documenso/commit/28865c2f710cb1e4a3b75ec285ddd33003650d28) chore: update the tests - [`e12b5ef`](https://github.com/documenso/documenso/commit/e12b5ef5d7e64265875b7196121cbfeaaff1d37f) Merge branch 'main' into fix/session-invalidation-password-reset - [`80b20b2`](https://github.com/documenso/documenso/commit/80b20b20e4be6242f2ce492b33d88d4d6af427e9) chore: refactor ### 📊 Changes **4 files changed** (+183 additions, -6 deletions) <details> <summary>View changed files</summary> 📝 `packages/app-tests/e2e/fixtures/authentication.ts` (+13 -1) 📝 `packages/app-tests/e2e/user/password.spec.ts` (+118 -2) 📝 `packages/auth/server/routes/email-password.ts` (+48 -3) 📝 `packages/lib/server-only/user/reset-password.ts` (+4 -0) </details> ### 📄 Description ## Description This PR fixes a bug where user sessions remained active after password reset or update. Previously, when users changed their password (either through forgot password flow or settings), existing sessions were not invalidated. ## Checklist - [x] I have tested these changes locally and they work as expected. - [x] I have added/updated tests that prove the effectiveness of these changes. - [x] I have updated the documentation to reflect these changes, if applicable. - [x] I have followed the project's coding style guidelines. - [x] I have addressed the code review feedback from the previous submission, if applicable. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem

2026-02-26 20:32:08 +03:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/documenso#2033

No description provided.

Rows
Columns