Nicola Murino f9857a181c dataprovider: refuse self-service writes made from a stale snapshot ...

A user or admin changing its own password, profile or two-factor
settings wrote the whole account back and could overwrite a concurrent
administrator change. Self-service updates are now conditional on the
stored updated_at matching the value read, and every update stores a
strictly increasing updated_at.

Thanks to Thomas Toth for the report.

Signed-off-by: Nicola Murino <nicola.murino@gmail.com>

2026-09-07 08:47:18 +02:00

248 KiB

Raw Permalink Blame History