Token Revocation on Secondary Email Removal

When we remove a secondary email address, we should revoke all other accessible tokens except the current to ensure security. Otherwise, even after the email is removed, it may take up to a time(7 days) for access to be fully revoked.

Domain
AuthN-Z
Action
fix
Department
Backend

Please authenticate to join the conversation.

Upvoters
Status

Completed

Board
๐Ÿ› ๏ธ

Bug & Fixes

Date

11 months ago

Author

tadael shewarega

Subscribe to post

Get notified by email when there are changes.