Repository navigation

fix(users): re-check the session user's status on every request - #38469

Open

jcastro-dotcms wants to merge 20 commits into

mainfrom

revalidate-session-user-status

Open

fix(users): re-check the session user's status on every request#38469
jcastro-dotcms wants to merge 20 commits into
mainfrom
revalidate-session-user-status

Commits on Nov 6, 2026
Commits on Nov 9, 2026
- Merge branch 'main' into revalidate-session-user-status
  jcastro-dotcms
  authored
  21a9853
Commits on Nov 10, 2026
- fix(maintenance): invalidate login tokens before ending a session
  
  jcastro-dotcms
  and
  claude
  committed
  bf2b847
- Merge branch 'main' into revalidate-session-user-status
  jcastro-dotcms
  authored
  d3ecdb4
- test(maintenance): declare the checked exception the session kill tests now see
  
  jcastro-dotcms
  and
  claude
  committed
  1e73671
Commits on Nov 11, 2026
- fix(login): do not resolve a refused session user again from the request's id copy
  
  jcastro-dotcms
  and
  claude
  committed
  36e1325
- test(login): cover the cache eviction of a user deleted inside a transaction
  
  jcastro-dotcms
  and
  claude
  committed
  f1cc447
- fix(websocket): take the handshake user from the session resolution only
  
  jcastro-dotcms
  and
  claude
  committed
  8331de5
- Merge branch 'main' into revalidate-session-user-status
  jcastro-dotcms
  authored
  571f815
- fix(maintenance): invalidate the login tokens of a session's users as one unit
  
  jcastro-dotcms
  and
  claude
  committed
  f369300
Commits on Nov 12, 2026
- test(login): check a session user id in another letter case after a deactivation
  
  jcastro-dotcms
  and
  claude
  committed
  3b24189
- Merge branch 'main' into revalidate-session-user-status
  jcastro-dotcms
  authored
  06acd07
- fix(login): keep a session bound to its user id as stored
  
  jcastro-dotcms
  and
  claude
  committed
  e118275