Problem Statement
Problem Statement: a task in bird-critic-1.5-full-300 (Harbor dataset). When a user changes their password, active refresh token sessions on other devices remain valid. Refresh tokens from other devices can still be used to obtain new access tokens, allowing continued account access after a…
The task
When a user changes their password, active refresh token sessions on other devices remain valid. Refresh tokens from other devices can still be used to obtain new access tokens, allowing continued account access after a password change. This is a security vulnerability: an attacker who previously obtained valid…
Part of kochsnow/bird-critic-1.5-full-300.