Revamped system for managing authentication tokens. - Every user has 1 token per client (web browser) - Tokens are rotated every 10 minutes New system migrates the old tokens to "legacy" tokens, so users still remain logged on. Also introduces weekly job to expire old auth tokens. |
||
|---|---|---|
| .. | ||
| fixtures | ||
| migrate | ||
| api_test_seeds.rb | ||