[Feature] Reset API keys when password is reset

I have searched the existing feature requests, both open and closed, to make sure this is not a duplicate request.

• Yes

The feature

Hi, I noticed that after a password reset the API keys are not reset.

In a hypothetical scenario where a non-tech savvy user accidentally exposes their password and wants to reset and is being unaware of API keys, someone who might have got hold on to the credentials in the meantime could have added an API key to keep access even after the password reset.

I think the security of the service could be improved by resetting also the API keys whenever the main password is reset.

An additional admin feature could be disabling API/API key functionality for certain users completely.



Platform

• Server
• Web
• Mobile