1 matches found
GSA Bounty: The user, who was deleted from Github Organization, still can access all functions of federalist, in case he didn't do logout
Description Hi. I found a non-critical session management bug, which still can have serious impact in some scenarios. When user perform login to the Federalist through Github, federalist checks his Organization ID but only upon login. When the user was deleted from organization for some reasons,...