You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Aug 20, 2019. It is now read-only.
The auth token used by Devise should only be valid when it is used by the same IP address and user agent. Currently a request from a different IP with a valid auth token will succeed. This is bad.
This might be able to be fixed using find_for_authentication in Devise::Models::Authenticatable.
The text was updated successfully, but these errors were encountered:
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
The auth token used by Devise should only be valid when it is used by the same IP address and user agent. Currently a request from a different IP with a valid auth token will succeed. This is bad.
This might be able to be fixed using
find_for_authentication
inDevise::Models::Authenticatable
.The text was updated successfully, but these errors were encountered: