John Cardinal 80f81aea0f case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed
A password set by someone else (reset code, administrator) or a disabled
login replaces the user's session token and download key; changing one's
own password keeps the session. PasswordResetCodeExpire is cleared (was
DlKeyExpire). The token middleware exempts only the exact login and
notify/hello routes and refuses inactive users and users who may not log
in. With a purchased licence, notify/hello no longer offers the default
SuperUser login and a SuperUser with the default password may only change
it (SuperUserDefaultPasswordRoutes). F7, F8 and F9 fixed. Manual and
changelog updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 19:54:03 -07:00
2023-01-21 01:23:19 +00:00
2026-02-02 02:48:54 +00:00
2026-02-13 09:13:54 -08:00
2022-03-31 22:35:14 +00:00
2022-03-22 20:09:17 +00:00
2023-05-02 22:12:23 +00:00
Description
No description provided
178 MiB
Languages
C# 99.6%
JavaScript 0.2%
Batchfile 0.2%