tree 9c81973bf90ad7c731f99ae4c3daa00f7460511d
parent 095bb6ddae8f651390097fb7bbded0089ac0fa05
author Damian Celico <damianx.celico@intel.com> 1661217538 +0200
committer Sivaprabu Ganesan <sivaprabug@ami.com> 1680157390 +0000

Old password input in change password screen

When the user changed their password in profile settings, to prevent
XSS attacks, I added the current password input field to authenticate
the user.

Once the authentication had success with the current password, then
allowing the update was possible. After the password is changed
successfully, all the sessions of the user who changed the password
will be disconnected, including the current session. and the current
session will navigate to the login page.

Signed-off-by: Kirankumar Ballapalli <kirankumarb@ami.com>
Change-Id: Idb8bc9d6ada420329c38407da76a08dc83fddd61