Item7922 < Bugs

• Do not register here on develop.twiki.org, login with your twiki.org account.
• Use

Item7848 for generic doc work for TWiki-6.1.1. Use

Item7851 for doc work on extensions that are not part of a release. More... Close
• Anything you create or change in standard webs (Main, TWiki, Sandbox etc) will be automatically reverted on every SVN update.
• Does this site look broken?. Use the LitterTray web for test cases.

AppliesTo:	Component:	Priority:	CurrentState:	WaitingFor:	TargetRelease	ReleasedIn
Engine		Normal	Confirmed		patch	6.1.1

Originally reported by Alexander Hook:

Failure to Invalidate Session on Password Change.
I observe that when we change password from one browser in place of session Expire from other browser its just update password from other browser and the old session got updated without being logout Steps to check session management issue on password change.

Login account from two browsers at a time [ From Chrome browser and From Mozilla Firefox].

Change password in setting from Chrome Browser.

Now check Mozilla FireFox. (First Refresh then Auto Updated in Place of Expiration ).

Your Session did not Get Updated in Place of Expiration.

Recommendations:
If Session is updating from one Browser so others should expire first to renew Session after login.

Workaround until fixed: Make sure to logout in all browsers when changing the password.

This will be released in the upcoming patch release.

-- TWiki:Main/PeterThoeny - 2020-11-16

ItemTemplate
Summary	Invalidate Session on Password Change
ReportedBy	TWiki:Main.PeterThoeny
Codebase	~twiki4, 6.1.0
SVN Range	TWiki-6.1.0-trunk, Thu, 05 Nov 2020, build 30858
AppliesTo	Engine
Component
Priority	Normal
CurrentState	Confirmed
WaitingFor
Checkins
TargetRelease	patch
ReleasedIn	6.1.1

Item7922: Invalidate Session on Password Change

Item Form Data

Edit Form Data

Detail