# Bug OP-12490 - Previously Created Session Continue Being Valid After 2FA Activation

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-12490

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | Medium |
| Module |  |
| Target versions | 12.5.4 |
| Observed in versions |  |
| Sprint | 12.5.4 |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### Steps to reproduce

*Please write down the steps to reproduce. Try to write down all necessary preconditions (what permissions do you have, are other users involved?). Example:*

1.  Access the same account on <https://sahil.openproject.com/login> in two different browsers.
2.  On device 'A' go to <https://sahil.openproject.com/login>\> complete all steps to activate the 2FA system (Now the 2FA is ENABLED) : Now the 2FA is activated for this account
3.  Back to device 'B' reload the page
4.  
### What is the buggy behavior?

*Please describe the bug in as much detail as possible. Example:*

  - The session of B is still Active 

### What is the expected behavior?

*Describe how the application should behave like. Example:*

1.  The session of B should be terminated