Sign out all operator sessions from a lost-device safety action #288

2026-08-08T09:55:55Z

timmy commented

2026-08-08 09:55:55 +00:00

Summary

add atomic, durable revocation for every active operator session
expose a same-origin CSRF-protected lost-device safety endpoint with fail-closed cookie handling
add an explicitly confirmed, subpath-safe mobile action that clears only Stackchain device data after success

Validation

pytest -q — 508 passed
Playwright at 390×844 — no horizontal overflow; action visible with 44px target

Closes #287

## Summary - add atomic, durable revocation for every active operator session - expose a same-origin CSRF-protected lost-device safety endpoint with fail-closed cookie handling - add an explicitly confirmed, subpath-safe mobile action that clears only Stackchain device data after success ## Validation - `pytest -q` — 508 passed - Playwright at 390×844 — no horizontal overflow; action visible with 44px target Closes #287

timmy added 1 commit 2026-08-08 09:55:56 +00:00

feat: sign out all operator sessions (#287 )

CI / build-frontend (pull_request) Successful in 5s

Details

CI / lint (pull_request) Successful in 28s

Details

37d55e9b20

timmy merged commit 80417abd5b into main

2026-08-08 09:56:46 +00:00

timmy referenced this issue from a commit

2026-08-08 09:56:47 +00:00

Merge pull request 'Sign out all operator sessions from a lost-device safety action' (#288) from timmy/287-sign-out-all-devices into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#288