reivilibre 0d28304c11 Revoke personal sessions when users are deactivated (#5181) ...

Revoke both personal sessions that are owned by, and acting as, the deactivated user.

Owned by because: it doesn't make sense for a deactivated user to be able to control themselves or other users, so them having active personal sessions is just confusing.

Acting as because: current precedent is that deactivated users are not controllable, even by admins.
To uphold this, the admin API is also fixed to stop allowing the creation of personal sessions for deactivated users.

2025-10-22 14:53:56 +01:00

..

src

Revoke personal sessions when users are deactivated (#5181)

2025-10-22 14:53:56 +01:00

Cargo.toml

Allow setting a custom clock on the QueueWorker & add one to the

2025-07-09 17:24:04 +02:00