Summary
User account self-service: profile settings, password change, and active session management.
Scope
- Profile settings — edit name, email, avatar. Avatar upload via the existing attachment system. Re-trigger email confirmation if email is changed.
- Password change — current password verification. New password with confirmation. Invalidate other active sessions on successful change.
- Session management — list active sessions (device, IP, last active, current indicator). Revoke individual sessions. "Sign out all other sessions" action.
Acceptance criteria
- Users can update their profile (name, email, avatar) and changes persist
- Email change triggers re-confirmation; access remains until re-confirmed
- Users can change their password and other sessions are invalidated
- Users can view and revoke active sessions from a settings page
Summary
User account self-service: profile settings, password change, and active session management.
Scope
Acceptance criteria