Limits of automatic session invalidation for expired credentials in CodeIgniter 4 Shield
When a user's password is marked as expired in the CodeIgniter 4 Shield authentication module, the login attempt fails unless the application explicitly checks the expiration flag and prompts a reset. However, any existing authenticated session remains active, allowing continued access until the session naturally expires or is manually destroyed. This behavi
codeigniter