Zachary Wasserman 0c62bda2f1 Fix session expiration logic with password reset (#619) ... - Only expire sessions at reset request time when admin forces reset - Expire sessions when reset completed Prior to this, there was a possible DoS vector in which an attacker could prevent a user from taking actions in the app by constantly requesting password resets and expiring all the user's active sessions. Fixes #612		2016-12-12 09:24:51 -08:00
..
config	store WebAddress config in datastore (#421)	2016-11-04 16:44:38 -04:00
contexts	Make context imports consistent (#359)	2016-10-31 15:18:05 -07:00
datastore	Add service method for bulk deleting queries (#600)	2016-12-09 09:12:45 -08:00
errors	removing some dependencies from glide (#493)	2016-11-16 10:38:31 -08:00
kolide	Add service method for bulk deleting queries (#600)	2016-12-09 09:12:45 -08:00
mail	Organizing go code (#241)	2016-09-26 11:48:55 -07:00
pubsub	Datastore refactor (#439)	2016-11-16 21:47:49 +08:00
service	Fix session expiration logic with password reset (#619)	2016-12-12 09:24:51 -08:00
version	Organizing go code (#241)	2016-09-26 11:48:55 -07:00
websocket	Push query results and metadata over websocket connection (#519)	2016-11-22 16:35:43 -08:00