What’s New
Recent changes to the TranzNova platform. Security-relevant entries are also published on the security notices page.
- Security
Session revocation now applies to realtime events
Previously, when you used "Sign out of all devices" or revoked a session from your Settings, the revoked session could continue receiving realtime notifications, messages, and presence updates until the underlying token expired (up to several days).
This has been fixed. Revoking a session now immediately disconnects all realtime connections for that session.
If you revoked sessions for security reasons in the past, you may wish to revoke them again. The previous revocation correctly prevented login and API access; this fix closes the realtime channel.
Affects: realtime notifications, direct messages, profile-view alerts, presence indicators. Reported and fixed in our internal security audit.