Merge pull request #15936 from nextcloud/bugfix/15539/wronguser-apptoken-impersonation

apps/encryption/lib/Hooks/UserHooks.php

apps/encryption/lib/Recovery.php

apps/encryption/tests/Controller/SettingsControllerTest.php

apps/encryption/tests/Hooks/UserHooksTest.php

apps/encryption/tests/RecoveryTest.php

apps/encryption/tests/UtilTest.php

apps/files_external/lib/Migration/DummyUserSession.php

lib/private/User/Session.php

lib/public/IUserSession.php

settings/Controller/AuthSettingsController.php

settings/Settings/Personal/Security.php

settings/js/vue-settings-personal-security.js

settings/js/vue-settings-personal-security.js.map

settings/src/components/AuthTokenSection.vue

settings/src/main-personal-security.js

tests/Settings/Controller/AuthSettingsControllerTest.php

tests/lib/Settings/Personal/SecurityTest.php