Fixed a logout bug when the access token changes
This commit is contained in:
@@ -19,12 +19,12 @@ router.post('/recover', require('./password-recover'));
|
|||||||
router.get('/reset', require('./password-redirect'));
|
router.get('/reset', require('./password-redirect'));
|
||||||
router.patch('/reset', require('./password-reset'));
|
router.patch('/reset', require('./password-reset'));
|
||||||
|
|
||||||
|
//logouts allowed when banned, and when the token itself is invalid
|
||||||
|
router.delete('/logout', require('./logout'));
|
||||||
|
|
||||||
//middleware
|
//middleware
|
||||||
router.use(tokenAuth);
|
router.use(tokenAuth);
|
||||||
|
|
||||||
//logouts allowed when banned, still needs tokens
|
|
||||||
router.delete('/logout', require('./logout'));
|
|
||||||
|
|
||||||
router.use(async (req, res, next) => {
|
router.use(async (req, res, next) => {
|
||||||
const record = await accounts.findOne({
|
const record = await accounts.findOne({
|
||||||
where: {
|
where: {
|
||||||
|
|||||||
Reference in New Issue
Block a user