{"action":"opened","issue":{"url":"https://api.github.com/repos/gitbucket/gitbucket/issues/1281","repository_url":"https://api.github.com/repos/gitbucket/gitbucket","labels_url":"https://api.github.com/repos/gitbucket/gitbucket/issues/1281/labels{/name}","comments_url":"https://api.github.com/repos/gitbucket/gitbucket/issues/1281/comments","events_url":"https://api.github.com/repos/gitbucket/gitbucket/issues/1281/events","html_url":"https://github.com/gitbucket/gitbucket/issues/1281","id":174035116,"number":1281,"title":"Disabled user session still lives!","user":{"login":"aadrian","id":140953,"avatar_url":"https://avatars.githubusercontent.com/u/140953?v=3","gravatar_id":"","url":"https://api.github.com/users/aadrian","html_url":"https://github.com/aadrian","followers_url":"https://api.github.com/users/aadrian/followers","following_url":"https://api.github.com/users/aadrian/following{/other_user}","gists_url":"https://api.github.com/users/aadrian/gists{/gist_id}","starred_url":"https://api.github.com/users/aadrian/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aadrian/subscriptions","organizations_url":"https://api.github.com/users/aadrian/orgs","repos_url":"https://api.github.com/users/aadrian/repos","events_url":"https://api.github.com/users/aadrian/events{/privacy}","received_events_url":"https://api.github.com/users/aadrian/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-30T14:31:06Z","updated_at":"2016-08-30T14:31:06Z","closed_at":null,"body":"Hi,\r\n\r\nIf the admin disabled a user, it's session still seem to live and the user can do stuff.\r\n\r\nIMHO in the moment a user is disabled, it's sessions should be invalidated too, so that the user is kicked out. If the user still keeps refreshing, the session is prolonged indefinitely, thus defying the purpose of disable.\r\n\r\nThank you."}}
{"actor":{"display_login":"aadrian"}}