search

maxdobeck / gatekeeper

API that performs user authentication and authorization as well as process business logic.
0 stars 0 forks source link

Ensure new CSRF token and cookie is retrieved after forced logout #22

Closed maxdobeck closed 6 years ago

maxdobeck commented 6 years ago

When a user is logged out due to a bad session get a new card token and cookie. Currently the last csrf token is used and it is stale.

maxdobeck commented 6 years ago

Looks like this is working but we don't direct the user to the next route and instead force them to the root url.

maxdobeck commented 6 years ago

This has been fixed by changing how we check for a valid session. Everything depends on the server side session via the cookie.