Revoke all user sessions on password reset

plausible · Sep 9, 2024 · f07bb80 · f07bb80
1 parent e122761
commit f07bb80
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/lib/plausible_web/live/reset_password_form.ex b/lib/plausible_web/live/reset_password_form.ex
@@ -10,6 +10,7 @@ defmodule PlausibleWeb.Live.ResetPasswordForm do
 
   alias Plausible.Auth
   alias Plausible.Repo
+  alias PlausibleWeb.UserAuth
 
   def mount(_params, %{"email" => email}, socket) do
     socket =
@@ -96,7 +97,8 @@ defmodule PlausibleWeb.Live.ResetPasswordForm do
       end)
 
     case result do
-      {:ok, _user} ->
+      {:ok, user} ->
+        UserAuth.revoke_all_user_sessions(user)
         {:noreply, assign(socket, trigger_submit: true)}
 
       {:error, changeset} ->