Remember me tokens now nuked upon full account logout.

This commit is contained in:
rainbow napkin 2025-10-21 07:59:15 -04:00
parent 3fb71ffb78
commit bc0657a702
5 changed files with 26 additions and 16 deletions

View file

@ -145,7 +145,7 @@ module.exports.authenticateSession = async function(identifier, secret, req, use
}
//return user
return userDB.user;
return userDB;
}catch(err){
//Failed attempts at good tokens are handled by the token schema by dropping the users effected tokens and screaming bloody murder
//Failed attempts with bad tokens don't need to be handled as it's not like attacking a bad UUID is going to get you anywhere anywho