loft reset password doesn't invalidate the current user session

loft-sh / loft

Namespace & Virtual Cluster Manager for Kubernetes - Lightweight Virtual Clusters, Self-Service Provisioning for Engineers and 70% Cost Savings with Sleep Mode

https://loft.sh/docs/introduction

Other

737 stars 65 forks source link

loft reset password doesn't invalidate the current user session #195

Open tukobadnyanoba opened 2 years ago

tukobadnyanoba commented 2 years ago

Start loft by firing ./loft-v2.1.8 start on your local.
This will print username and password. Use them to log in to https://localhost:9898
Open new terminal and run ./loft-v2.1.8 reset password.
Reset the password.
Go back to https://localhost:9898 and perform any action like create space, space will be created
Further user requests should be invalidated and should be asked to re-login with new password and then actions should be allowed.