@dedreuil, thanks for reporting this!
We shouldn't really invalidate credentials unconditionally on 40[1,2,3] (?), but if we do we also need to remove any tokens in the database.
@dedreuil, thanks for reporting this!
We shouldn't really invalidate credentials unconditionally on 40[1,2,3] (?), but if we do we also need to remove any tokens in the database.