September 9, 2026
the password change that logged me out of my own session
A Path=/auth cookie that a form post could never actually send, why the except-current fallback nuked every session including the current one, and the full-rotation fix.
September 9, 2026
A Path=/auth cookie that a form post could never actually send, why the except-current fallback nuked every session including the current one, and the full-rotation fix.