Use login tokens instead of storing the password hash in the browser's session

NiklasRosenstein / flux-ci

Flux is your own private & lightweight CI server.

MIT License

26 stars 10 forks source link

Use login tokens instead of storing the password hash in the browser's session #45

Closed NiklasRosenstein closed 6 years ago

NiklasRosenstein commented 6 years ago

This PR addresses #16

NiklasRosenstein commented 6 years ago

I've also added a list of the user's login sessions to the "User Settings" page. Maybe I should add an option to "logout from all devices" and cleanup expired login tokens from time to time.