loopback/test/fixtures/access-control
Miroslav Bajtoš f1e31ca50c Add app setting logoutSessionsOnSensitiveChanges
Disable invalidation of access tokens by default to restore backwards
compatibility with older 2.x versions.

Add a new application-wide flag logoutSessionsOnSensitiveChanges
that can be used to explicitly turn on/off the token invalidation.

When the flag is not set, a verbose warning is printed to nudge the user
to make a decision how they want to handle token invalidation.
2017-01-20 12:57:23 +01:00
..
common/models resolve related models from correct registry 2016-08-25 10:39:44 +02:00
server Add app setting logoutSessionsOnSensitiveChanges 2017-01-20 12:57:23 +01:00