diff --git a/.gitignore b/.gitignore index e9f840267..26d2bd355 100644 --- a/.gitignore +++ b/.gitignore @@ -3,8 +3,7 @@ node_modules/ dist/ npm-debug.log yarn-error.log -app.pyc -demo.ncdb +*.db config.ini cert.key cert.crt \ No newline at end of file diff --git a/routes/login.js b/routes/login.js index 6a19bef94..127440a65 100644 --- a/routes/login.js +++ b/routes/login.js @@ -16,9 +16,10 @@ router.post('', async (req, res, next) => { if (req.body.username === userName && await verifyPassword(guessedPassword)) { const rememberMe = req.body.rememberme; - req.session.loggedIn = true; - - return res.redirect('/'); + req.session.regenerate(() => { + req.session.loggedIn = true; + res.redirect('/'); + }); } else { res.render('login', {'failedAuth': true}); diff --git a/routes/logout.js b/routes/logout.js index b566ef60f..bc1b73700 100644 --- a/routes/logout.js +++ b/routes/logout.js @@ -2,9 +2,12 @@ const express = require('express'); const router = express.Router(); router.post('', async (req, res, next) => { - req.session.loggedIn = false; + req.session.regenerate(() => { + req.session.loggedIn = false; + + res.redirect('/'); + }); - res.redirect('login'); }); module.exports = router;