nexxo 055c6228f4 Stop a suspended customer's sign-out from killing a shared operator session ... EnsureCustomerActive used session()->invalidate() to sign a suspended or closed customer out. In shared-host mode the console and the portal keep their login key in one session, so invalidate() (flush() + migrate(true)) silently signed out an operator elsewhere in that same browser too. Same fix as the console's own /logout route: regenerate() gets a fresh session id without flushing attributes belonging to another guard.		2026-07-28 15:02:00 +02:00
..
EnsureAdmin.php	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
EnsureCustomerActive.php	Stop a suspended customer's sign-out from killing a shared operator session	2026-07-28 15:02:00 +02:00
PublicSiteGate.php	Stop a disabled operator from bypassing the hidden-site gate	2026-07-28 14:42:29 +02:00
RequireOperatorTwoFactor.php	Let the owner make two-factor compulsory, without locking themselves out	2026-07-28 12:08:08 +02:00
RestrictAdminHost.php	Authorize the console's live feed on the operator guard, not the default	2026-07-28 13:31:50 +02:00
RestrictConsoleNetwork.php	Give the three console guards one answer to "is this the console?"	2026-07-27 04:52:21 +02:00