mirror of
https://github.com/GSA/notifications-api.git
synced 2026-05-07 09:38:23 -04:00
when we change the last logged in time, set the current session id to a random uuid this way, we can compare it to the cookie a user has, and if they differ then we can log them out also update user.logged_in_at at 2FA rather than password check, since that feels more accurate