mirror of
https://github.com/J3vb/OwnCord.git
synced 2026-09-03 03:50:00 +03:00
UpdateUserPassword commits first; when DeleteOtherSessions then errored the handler returned 500 and skipped the audit row — telling the user the change failed while the new password was already live, walking them into retrying with a dead password and tripping the confirm lockout. The committed change now always audits and reports success; revocation gets one bounded compensating retry, and a persistent failure surfaces as a 200 + warning (sessions_revoked count) the client can show. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>