search

gbv / login-server

Login and connect accounts with multiple identity providers
https://coli-conc.gbv.de/login/
MIT License
31 stars 32 forks source link

Tokens are not updated to WebSocket client after logging out and back in #101

Closed stefandesu closed 1 year ago

stefandesu commented 1 year ago

This should be related to the changes here: https://github.com/gbv/login-server/commit/acaca9be28e4ca2590d553616f91b35295b65dff

I assume there's a missing interval after logging back in.

stefandesu commented 1 year ago

With the recent changes, the sessionID for a particular WebSocket can change. The code however saved the sessionID for the WebSocket into a variable and used that for the remaining time. If the sessionID changed after a logout, the saved ID would be outdated and the interval would fail to get user data for that particular sessionID.