BUGFIX: cleared admin cookie on logout
This commit is contained in:
@@ -2,6 +2,7 @@ const route = (req, res) => {
|
|||||||
//clear cookies and stored data
|
//clear cookies and stored data
|
||||||
req.session.account = null;
|
req.session.account = null;
|
||||||
res.clearCookie('loggedin');
|
res.clearCookie('loggedin');
|
||||||
|
res.clearCookie('admin');
|
||||||
|
|
||||||
return res.status(200).end();
|
return res.status(200).end();
|
||||||
};
|
};
|
||||||
|
|||||||
@@ -2,6 +2,7 @@ const { Op } = require('sequelize');
|
|||||||
const { bannedEmails, accounts } = require('../database/models');
|
const { bannedEmails, accounts } = require('../database/models');
|
||||||
|
|
||||||
const route = async (req, res) => {
|
const route = async (req, res) => {
|
||||||
|
//TODO: move to middleware
|
||||||
//make sure the account is an admin
|
//make sure the account is an admin
|
||||||
if (req.cookies['admin'] !== process.env.SESSION_ADMIN) {
|
if (req.cookies['admin'] !== process.env.SESSION_ADMIN) {
|
||||||
return res.status(401).send('invalid admin status');
|
return res.status(401).send('invalid admin status');
|
||||||
@@ -33,7 +34,7 @@ const route = async (req, res) => {
|
|||||||
.catch(e => console.error(e))
|
.catch(e => console.error(e))
|
||||||
;
|
;
|
||||||
|
|
||||||
res.status(200).json(data);
|
return res.status(200).json(data);
|
||||||
};
|
};
|
||||||
|
|
||||||
module.exports = route;
|
module.exports = route;
|
||||||
Reference in New Issue
Block a user