Security actions on user detail:
- 'Require password reset' toggle: next login forces reset flow
- 'Sign out all sessions' button killing refresh tokens server-side
Both need strong confirmations. After firing, show inline success states. These call backend endpoints that may not exist yet; define the expected API contract in the PR description so backend can implement to match.
Security actions on user detail:
Both need strong confirmations. After firing, show inline success states. These call backend endpoints that may not exist yet; define the expected API contract in the PR description so backend can implement to match.