Remember me tokens now nuked upon full account logout.
This commit is contained in:
parent
3fb71ffb78
commit
bc0657a702
5 changed files with 26 additions and 16 deletions
|
|
@ -145,7 +145,7 @@ module.exports.authenticateSession = async function(identifier, secret, req, use
|
|||
}
|
||||
|
||||
//return user
|
||||
return userDB.user;
|
||||
return userDB;
|
||||
}catch(err){
|
||||
//Failed attempts at good tokens are handled by the token schema by dropping the users effected tokens and screaming bloody murder
|
||||
//Failed attempts with bad tokens don't need to be handled as it's not like attacking a bad UUID is going to get you anywhere anywho
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue