Sign out all operator sessions from a lost-device safety action #288

Merged
timmy merged 1 commits from timmy/287-sign-out-all-devices into main 2026-08-08 09:56:46 +00:00
Owner

Summary

  • add atomic, durable revocation for every active operator session
  • expose a same-origin CSRF-protected lost-device safety endpoint with fail-closed cookie handling
  • add an explicitly confirmed, subpath-safe mobile action that clears only Stackchain device data after success

Validation

  • pytest -q — 508 passed
  • Playwright at 390×844 — no horizontal overflow; action visible with 44px target

Closes #287

## Summary - add atomic, durable revocation for every active operator session - expose a same-origin CSRF-protected lost-device safety endpoint with fail-closed cookie handling - add an explicitly confirmed, subpath-safe mobile action that clears only Stackchain device data after success ## Validation - `pytest -q` — 508 passed - Playwright at 390×844 — no horizontal overflow; action visible with 44px target Closes #287
timmy added 1 commit 2026-08-08 09:55:56 +00:00
feat: sign out all operator sessions (#287)
All checks were successful
CI / lint (pull_request) Successful in 28s
CI / build-frontend (pull_request) Successful in 5s
37d55e9b20
timmy merged commit 80417abd5b into main 2026-08-08 09:56:46 +00:00
Sign in to join this conversation.
No reviewers
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stackchain/stackchain-dashboard#288
No description provided.