fix: #8232, unresolvable session mismatch on register cancel

This commit is contained in:
Julian Lam
2020-04-13 13:26:17 -04:00
parent e440d617d4
commit f2f6fbf15a

View File

@@ -195,6 +195,7 @@ authenticationController.registerComplete = function (req, res, next) {
authenticationController.registerAbort = function (req, res) {
// End the session and redirect to home
req.session.destroy(function () {
res.clearCookie(nconf.get('sessionKey'), meta.configs.cookie.get());
res.redirect(nconf.get('relative_path') + '/');
});
};
@@ -423,9 +424,7 @@ authenticationController.logout = async function (req, res, next) {
req.logout();
await destroyAsync(req);
res.clearCookie(nconf.get('sessionKey'), {
path: nconf.get('relative_path'),
});
res.clearCookie(nconf.get('sessionKey'), meta.configs.cookie.get());
req.uid = 0;
req.headers['x-csrf-token'] = req.csrfToken();