paul-bokelman / cc

ClubCompass client and server monorepo
0 stars 0 forks source link

bug: sessions persist across schools #33

Open paul-bokelman opened 5 months ago

paul-bokelman commented 5 months ago

Description

This issue was caused by the change in cookie domains. Currently the cookie domain is .club-compass.com which means it's a valid cookie for all subdomains of club-compass.

Proposed Solution

Check if session is connected to school, if it's not destroy the session and return "unauthorized".

Parent: #17