This repository was archived by the owner on Apr 26, 2024. It is now read-only.
This repository was archived by the owner on Apr 26, 2024. It is now read-only.
Make the 'and also log out all my devices' behaviour of password reset optional. #6976
Description
Password reset signs out all of your sessions.
The 'password reset' and 'log out all devices' actions do not need to be inseparable. If you suspect your account has been compromised then logging out your other devices is important. In (I think) all other cases it is overkill.
Can we make a backwards-compatible change to the password reset API by adding an optional "and log out all my devices" parameter which defaults to 'true'?
Metadata
Metadata
Assignees
Labels
No labels