devise
devise copied to clipboard
Update tracked fields when session times out but remember me is active.
This concerns the interaction between rememberable, timeoutable and trackable.
Currently, when a session expires after a timeout, but a remember token is active, the tracked fields (sign in count, ip, time etc) are not updated. However in the same scenario when the browser session cookie has been cleared after a browser restart, the tracked fields are updated.
This PR fixes the inconsistency. The tracked fields will be updated after a "login" caused by the remember token being present.