4 commits

Author	SHA1	Message	Date
Francis Murillo	5fb1c3e934	Revoke all authorized applications on password reset (#21325) ... * Clear sessions on password change * Rename User::clear_sessions to revoke_access for a clearer meaning * Add reset paassword controller test * Use User.find instead of User.find_for_authentication for reset password test * Use redirect and render for better test meaning in reset password Co-authored-by: Effy Elden <effy@effy.space>	2022-12-15 15:47:06 +01:00
Yamagishi Kazutoshi	d10447c3a8	Use raw status code on have_http_status (#7214)	2018-04-21 21:35:07 +02:00
nullkal	dfcd2834f9	Redirect to PasswordController#new when reset_password_token is invalid (#4506)	2017-08-03 17:45:45 +02:00
Akihiko Odaki	a7f2961621	Spec Auth::PasswordsController (#3352)	2017-05-29 18:10:50 +02:00