forked from Cookies_Github_mirror/AquaDX
fix: clear sessions upon password reset
This commit is contained in:
@@ -202,6 +202,11 @@ class UserRegistrar(
|
|||||||
// Change the password
|
// Change the password
|
||||||
async { userRepo.save(reset.aquaNetUser.apply { pwHash = validator.checkPwHash(password) }) }
|
async { userRepo.save(reset.aquaNetUser.apply { pwHash = validator.checkPwHash(password) }) }
|
||||||
|
|
||||||
|
// Clear all sessions
|
||||||
|
sessionRepo.deleteAll(
|
||||||
|
sessionRepo.findByAquaNetUserAuId(reset.aquaNetUser.auId)
|
||||||
|
)
|
||||||
|
|
||||||
return SUCCESS
|
return SUCCESS
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user