Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-12-24 01:10:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

store user sessionId mapping per user

Browse Source
This commit is contained in:
barisusakli
2015-12-23 18:22:32 +02:00
parent b7e492363c
commit a43eef283c
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/controllers/accounts/session.js
View File

@@ -15,7 +15,7 @@ sessionController.revoke = function(req, res, next) {
var _id; var _id;
async.waterfall([ async.waterfall([
async.apply(db.getObjectField, 'sessionUUID:sessionId', req.params.uuid), async.apply(db.getObjectField, 'uid:' + req.uid + ':sessionUUID:sessionId', req.params.uuid),
function(sessionId, next) { function(sessionId, next) {
if (!sessionId) { if (!sessionId) {
return next(new Error('[[error:no-session-found]]')); return next(new Error('[[error:no-session-found]]'));

2
src/controllers/authentication.js
View File

@@ -197,7 +197,7 @@ function continueLogin(req, res, next) {
// Associate login session with user // Associate login session with user
user.auth.addSession(userData.uid, req.sessionID); user.auth.addSession(userData.uid, req.sessionID);
db.setObjectField('sessionUUID:sessionId', uuid, req.sessionID); db.setObjectField('uid:' + userData.uid + 'sessionUUID:sessionId', uuid, req.sessionID);
plugins.fireHook('action:user.loggedIn', userData.uid); plugins.fireHook('action:user.loggedIn', userData.uid);
} }

2
src/user/auth.js
View File

@@ -121,7 +121,7 @@ module.exports = function(User) {
db.sessionStore.get(sessionId, function(err, sessionObj) { db.sessionStore.get(sessionId, function(err, sessionObj) {
async.parallel([ async.parallel([
async.apply(db.deleteObjectField, 'sessionUUID:sessionId', sessionObj.meta.uuid), async.apply(db.deleteObjectField, 'uid:' + uid + ':sessionUUID:sessionId', sessionObj.meta.uuid),
async.apply(db.sortedSetRemove, 'uid:' + uid + ':sessions', sessionId), async.apply(db.sortedSetRemove, 'uid:' + uid + ':sessions', sessionId),
async.apply(db.sessionStore.destroy.bind(db.sessionStore), sessionId) async.apply(db.sessionStore.destroy.bind(db.sessionStore), sessionId)
], callback); ], callback);