TeskaLabs / seacat-auth

SeaCat Auth provides authentication, authorization, identity management, session management and other access control features.

GNU General Public License v3.0

11 stars 6 forks source link

Encrypt cookie value in session update #394

Closed byewokko closed 3 weeks ago

byewokko commented 3 weeks ago

Issue

Successful re-login leads to logout. This is caused by session cookie value being stored improperly in the DB. This happens only in root SSO session update, i.e. re-login.

Solution

Cookie value must be encrypted in session update the same way it is done in session creation.