Marc-André Bombeck 12844a9206 test(auth): bind the rotated cookie through its hash after a password change ...

The assertion compared the cookie to the new session row's id, which only
held while the id WAS the cookie. Check the stored hash instead: it
proves the cookie authenticates the surviving row and that the row id
never reaches the client.

2026-07-19 11:40:56 +02:00

..

integration

test(auth): bind the rotated cookie through its hash after a password change

2026-07-19 11:40:56 +02:00