Simon Backx f732b0181d Fixed last_seen updated for suspended users (#14715) ... refs https://github.com/TryGhost/Team/issues/1461 - A suspended user was able to make it through the Express middlewares to the `updateUserLastSeen` middleware, until it was halted when checking the user permissions in the API pipeline. This was only the case for session logins, not for API keys. - For API keys, the user status is checked: 6dc3f1bf56/core/server/services/auth/api-key/admin.js (L178-L181) - In the session middleware, the `findUserById` in `getUserForSession` didn't filter on the active status of users: be4146e324/core/server/services/auth/session/middleware.js (L22-L27) - This has been fixed now by updating the sessionService's `findUserById` method.		2022-05-10 13:34:12 +02:00
..
admin	Fixed last_seen updated for suspended users (#14715)	2022-05-10 13:34:12 +02:00
content	Aliased canary endpoints to point to non-versioned URLs	2022-03-14 21:22:54 +13:00