[5.x] Logout user from other devices when changing password

src/Http/Controllers/CP/Users/PasswordController.php

@@ -2,7 +2,10 @@
 
 namespace Statamic\Http\Controllers\CP\Users;
 
+use Illuminate\Auth\Events\OtherDeviceLogout;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
 use Illuminate\Validation\Rules\Password;
 use Statamic\Events\UserPasswordChanged;
 use Statamic\Exceptions\NotFoundHttpException;
@@ -31,6 +34,10 @@ public function update(Request $request, $user)
 
         UserPasswordChanged::dispatch($user);
 
+        if ($currentPassword = $request->current_password) {
+            Auth::logoutOtherDevices($currentPassword);
+        }
+
         return response('', 204);
     }
 }

src/Providers/CpServiceProvider.php

@@ -79,6 +79,7 @@ protected function registerMiddlewareGroups()
             \Illuminate\View\Middleware\ShareErrorsFromSession::class,
             \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
+            \Illuminate\Session\Middleware\AuthenticateSession::class,
             \Statamic\Http\Middleware\CP\ContactOutpost::class,
             \Statamic\Http\Middleware\CP\AuthGuard::class,
             \Statamic\Http\Middleware\CP\AddToasts::class,