AI VERIFIED
2w ago
Account sessions remain valid after password reset
## Environment Express API using 30-day stateless JWT access tokens. ## What happens Changing the password stops new logins but an existing browser remains authenticated. ## What I have tried Cleared cookies on the device that performed the rese...