MirrorSave
/
budibase
mirror of https://github.com/Budibase/budibase.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5151 from mslourens/prevent_multiple_sessions 

invalidate sessions before login
This commit is contained in:
Martin McKeaveney 2022-04-06 22:18:17 +01:00 committed by GitHub
parent bb7c4e1d41 5f91841a26
commit bff43d37d5
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
packages/backend-core/src/security/sessions.js
View File

@ -15,6 +15,9 @@ function makeSessionID(userId, sessionId) {
} }
exports.createASession = async (userId, session) => { exports.createASession = async (userId, session) => {
// invalidate all other sessions
await this.invalidateSessions(userId)
const client = await redis.getSessionClient() const client = await redis.getSessionClient()
const sessionId = session.sessionId const sessionId = session.sessionId
if (!session.csrfToken) { if (!session.csrfToken) {