Joplin
/
joplin
mirror of https://github.com/laurent22/joplin.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Server: Also clear admin session ID on logout after impersonating a user

pull/5465/head
Laurent Cozic 2021-09-27 18:34:12 +01:00
parent 8c9331cf61
commit 24945a0d3e
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
packages/server/src/routes/index/logout.ts
View File

@ -11,6 +11,7 @@ const router = new Router(RouteType.Web);
router.post('logout', async (_path: SubPath, ctx: AppContext) => {
const sessionId = contextSessionId(ctx, false);
cookieSet(ctx, 'sessionId', '');
cookieSet(ctx, 'adminSessionId', '');
await ctx.joplin.models.session().logout(sessionId);
return redirect(ctx, `${config().baseUrl}/login`);
});