Mathijs van Veluw f62a7a66c8 Rotate refresh-tokens on sstamp reset (#7031) ...

When a security-stamp gets reset/rotated we should also rotate all device refresh-tokens to invalidate them.
Else clients are still able to use old refresh tokens.

Signed-off-by: BlackDex <black.dex@gmail.com>

2026-03-29 22:43:36 +02:00

..

api

Rotate refresh-tokens on sstamp reset (#7031)

2026-03-29 22:43:36 +02:00

db

Rotate refresh-tokens on sstamp reset (#7031)

2026-03-29 22:43:36 +02:00

static

Misc Updates (#7027)

2026-03-29 22:21:39 +02:00

auth.rs

Fix 2FA Remember to actually be 30 days (#6929)

2026-03-23 23:12:07 +01:00

config.rs

Update Feature Flags (#6981)

2026-03-23 21:21:21 +01:00

crypto.rs

Update Rust and Crates and GHA (#6843)

2026-02-18 00:17:20 +01:00

error.rs

Optimizations and build speedup (#6339)

2025-11-01 22:21:04 +01:00

http_client.rs

Add option to prefer IPv6 resolving (#6494)

2025-11-26 01:26:10 +01:00

mail.rs

fix(send_invite): add orgSsoIdentifier if sso_only is enabled (#6824)

2026-02-23 20:28:12 +01:00

main.rs

Fix web-vault version check and update web-vault (#6686)

2026-01-09 13:21:10 +01:00

ratelimit.rs

Optimizations and build speedup (#6339)

2025-11-01 22:21:04 +01:00

sso_client.rs

Add 30s cache to SSO exchange_refresh_token (#6866)

2026-03-09 18:10:06 +01:00

sso.rs

Improve sso auth flow (#6205)

2025-12-06 22:20:04 +01:00

util.rs

Update Feature Flags (#6981)

2026-03-23 21:21:21 +01:00