Method SetIPChangeEnforce

internal/server/server.go:940–942

SetIPChangeEnforce controls how the auth middleware reacts when a session's binding (client IP OR User-Agent hash) changes mid-lifetime: - mode == "strict": revoke the session and reject the request (the token is treated as possibly stolen). Covers BOTH the IP and the UA signal — one flag arms the w

(mode string)

//     PAD_IP_CHANGE_ENFORCE env var. See handleSessionIPChange /
//     handleSessionUAChange for the per-signal semantics.
func (s *Server) SetIPChangeEnforce(mode string) {
	s.ipChangeEnforceStrict = strings.EqualFold(strings.TrimSpace(mode), "strict")
}

// reconfigureEmail reads email settings from the platform_settings table
// and updates (or creates) the email sender. Called after admin settings change.