Skip to content

fix(security): evict same-user sessions when slots full on login#23

Merged
massif-01 merged 1 commit intoRMinte:mainfrom
massif-01:main
Feb 26, 2026
Merged

fix(security): evict same-user sessions when slots full on login#23
massif-01 merged 1 commit intoRMinte:mainfrom
massif-01:main

Conversation

@massif-01
Copy link
Collaborator

  • Add destroy_sessions_by_client() to free slots for re-login
  • When session slots are full, evict existing sessions for the same client_id before creating new session
  • Fixes 'Invalid credentials' on re-login after page refresh when slots were exhausted by orphaned sessions
  • Bump version to 0.4.4

- Add destroy_sessions_by_client() to free slots for re-login
- When session slots are full, evict existing sessions for the same
  client_id before creating new session
- Fixes 'Invalid credentials' on re-login after page refresh when
  slots were exhausted by orphaned sessions
- Bump version to 0.4.4
@massif-01 massif-01 merged commit 1ee5d58 into RMinte:main Feb 26, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant