Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Password change via the Carbon Console does not revoke cached tokens in portals, makes REST API accessible #3420

Open
AshenShalitha opened this issue Dec 5, 2024 · 0 comments
Open

Password change via the Carbon Console does not revoke cached tokens in portals, makes REST API accessible #3420

AshenShalitha opened this issue Dec 5, 2024 · 0 comments
Labels
Type/Bug

Comments

@AshenShalitha
Copy link

AshenShalitha commented Dec 5, 2024 •
edited
Loading

Description

When the password is changed for a user from the carbon console, the user is still able to access the portals using the previous session.

Steps to Reproduce

  • Log in to a portal (publisher, devportal, etc)
  • Login to the carbon console and change the password of the above user.
  • The user is still able to access the portals since the previous session is not terminated.

Version

4.1.0

Environment Details (with versions)

No response
@AshenShalitha AshenShalitha changed the title Password is change perfomed from the carbon console does not invalidates the session of the portals Password change via the Carbon Console does not revoke cached tokens in portals, makes REST API accessible Dec 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Type/Bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@AshenShalitha