skip to Main Content

Redis – Invalidating Devise user session identifier after password update

Scenario: As an Administrator I need to invalidate a user's session (log them out) after I update the user's password. This is in accordance with best practices as per https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#Renew_the_Session_ID_After_Any_Privilege_Level_Change I am using Devise and I saw here https://stackoverflow.com/a/45756884/664675 there…

VIEW QUESTION
Back To Top
Search