Tim Farrell 8c37edd027 Even though "User.email" is enforced as unique at signup, it is not a unique field in the database. Let's use "User.id" instead. This also makes it more difficult to do a session stealing attack.

2024-02-02 09:01:06 -06:00

2.0 KiB

Raw Blame History

View Raw