New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Clean previous session after user requested new password. #34

Open

awesemo opened this issue Oct 14, 2014 · 0 comments

awesemo commented Oct 14, 2014

The scenario:

"duration_in_minutes" was set to "15 minutes"
The lockout was triggered and the user was redirected to the password recovery.
User requested a new password and successfully logged in to the site.
User logged out.
User will not be able to login again since the previous session is still active.

Is this normal? I'm thinking of once the user successfully logged in to the site, the previous session should be cleared already.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment