regenerate session after login/logout

This commit is contained in:
azivner 2017-10-15 20:16:30 -04:00
parent 0c823a2927
commit 4459b22552
3 changed files with 10 additions and 7 deletions

3
.gitignore vendored
View File

@ -3,8 +3,7 @@ node_modules/
dist/ dist/
npm-debug.log npm-debug.log
yarn-error.log yarn-error.log
app.pyc *.db
demo.ncdb
config.ini config.ini
cert.key cert.key
cert.crt cert.crt

View File

@ -16,9 +16,10 @@ router.post('', async (req, res, next) => {
if (req.body.username === userName && await verifyPassword(guessedPassword)) { if (req.body.username === userName && await verifyPassword(guessedPassword)) {
const rememberMe = req.body.rememberme; const rememberMe = req.body.rememberme;
req.session.loggedIn = true; req.session.regenerate(() => {
req.session.loggedIn = true;
return res.redirect('/'); res.redirect('/');
});
} }
else { else {
res.render('login', {'failedAuth': true}); res.render('login', {'failedAuth': true});

View File

@ -2,9 +2,12 @@ const express = require('express');
const router = express.Router(); const router = express.Router();
router.post('', async (req, res, next) => { router.post('', async (req, res, next) => {
req.session.loggedIn = false; req.session.regenerate(() => {
req.session.loggedIn = false;
res.redirect('/');
});
res.redirect('login');
}); });
module.exports = router; module.exports = router;