Delete all other sessions after setting a new password

src/Controllers/SettingsController.php

@@ -145,6 +145,11 @@ class SettingsController extends BaseController
 
             $this->addNotification('settings.password.success');
             $this->log->info('User set new password.');
+
+            $user->sessions()
+                ->getQuery()
+                ->where('id', '!=', session()->getId())
+                ->delete();
         }
 
         return $this->redirect->to('/settings/password');

tests/Unit/Controllers/SettingsControllerTest.php

@@ -283,6 +283,13 @@ class SettingsControllerTest extends ControllerTest
         $session = $this->app->get('session');
         $messages = $session->get('messages.' . NotificationType::MESSAGE->value);
         $this->assertEquals('settings.password.success', $messages[0]);
+
+        $this->assertCount(
+            1,
+            SessionModel::whereUserId($this->user->id)->get(),
+            'All other user sessions should be deleted after setting a new password'
+        );
+        $this->assertCount(2, SessionModel::all()); // Current session and another one should be still there
     }
 
     /**