kolaente 3bc0093686 fix: invalidate all sessions when enabling TOTP ... When a user enables two factor authentication, all existing sessions are now invalidated, requiring re-authentication. This prevents pre-existing sessions from bypassing 2FA. The frontend now shows a notice explaining the logout before the user confirms, and properly logs out after enabling. Ref: GHSA-pgc7-cmvg-mvp4		2026-03-19 12:27:44 +01:00
..
v1	fix: invalidate all sessions when enabling TOTP	2026-03-19 12:27:44 +01:00