High-level rank changes and bad attempts and good Remember-Me tokens now logged.
This commit is contained in:
parent
a34ece4374
commit
1bd9fcdc80
5 changed files with 53 additions and 23 deletions
|
|
@ -128,14 +128,15 @@ rememberMeToken.statics.authenticate = async function(id, token, failLine = "Bad
|
|||
badLogin();
|
||||
}
|
||||
|
||||
//Populate the user field
|
||||
await tokenDB.populate('user');
|
||||
|
||||
//Check our password is correct
|
||||
if(await tokenDB.checkToken(token)){
|
||||
//Populate the user field
|
||||
await tokenDB.populate('user');
|
||||
|
||||
//Return the user doc
|
||||
return tokenDB.user;
|
||||
}else{
|
||||
loggerUtils.dumpSecurityLog(`Failed attempt at ${tokenDB.user.user}'s Remember-Me token {${tokenDB.id}}... Nuking token!`);
|
||||
//Nuke the token for security
|
||||
await tokenDB.deleteOne();
|
||||
//if not scream and shout
|
||||
|
|
|
|||
|
|
@ -186,6 +186,11 @@ userSchema.pre('save', async function (next){
|
|||
|
||||
//If rank was changed
|
||||
if(this.isModified("rank")){
|
||||
//If this rank change is above 2 (Mod or above)
|
||||
if(permissionModel.rankToNum(this.rank) > 2){
|
||||
loggerUtils.dumpSecurityLog(`${this.user}'s rank was set to ${this.rank}.`);
|
||||
}
|
||||
|
||||
//force a full log-out
|
||||
await this.killAllSessions("Your site-wide rank has changed. Sign-in required.");
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue