John Cardinal 80f81aea0f case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed ...

A password set by someone else (reset code, administrator) or a disabled
login replaces the user's session token and download key; changing one's
own password keeps the session. PasswordResetCodeExpire is cleared (was
DlKeyExpire). The token middleware exempts only the exact login and
notify/hello routes and refuses inactive users and users who may not log
in. With a purchased licence, notify/hello no longer offers the default
SuperUser login and a SuperUser with the default password may only change
it (SuperUserDefaultPasswordRoutes). F7, F8 and F9 fixed. Manual and
changelog updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 19:54:03 -07:00

..

biz

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

ControllerHelpers

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

Controllers

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

DataList

case 4690 - data-list date filters: >= and < from the start of the minute, != excludes the whole minute; null check first

2026-10-22 20:38:23 -07:00

generator

case 4690 - backup: run pg_dump without a shell, password in PGPASSWORD, failures detected by exit code

2026-10-22 20:00:52 -07:00

kpi

case 4717 - KPI interval accepted only as a known date unit

2026-10-24 12:36:52 -07:00

models

case 4173

2023-05-08 22:54:18 +00:00

PickList

case 4712 - customer contacts' pick lists limited to their own records

2026-10-24 14:14:43 -07:00

resource

case 4597

2024-05-13 23:10:34 +00:00

util

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00

appsettings.Development.json

…

appsettings.json

case 4690 - appsettings.json: Debug/Console log levels Trace -> Warning

2026-10-22 19:47:31 -07:00

AyaNova.csproj

case 4690 - remaining packages to current releases (Bogus, jose-jwt, QRCoder); Newtonsoft.Json direct reference

2026-10-22 19:47:31 -07:00

ayanova.ico

2021-12-02 23:23:10 +00:00

ConfigureSwaggerOptions.cs

case 4690 - Swashbuckle 10.3.1 / OpenAPI.NET 2: namespace and security requirement changes; drop explicit Microsoft.OpenApi

2026-10-22 16:46:49 -07:00

Program.cs

case 4724 - SMTP certificate checked, password never returned

2026-10-24 19:09:02 -07:00

Startup.cs

case 4725 - sessions end on password reset and login disabled, exact login route, default SuperUser limited when licensed

2026-10-24 19:54:03 -07:00