self-hosted/joplin
1
0
Fork 0
mirror of https://github.com/laurent22/joplin.git synced 2024-12-30 10:36:35 +02:00
Code Issues Releases Activity

Server: Also clear admin session ID on logout after impersonating a user

Browse Source
This commit is contained in:
Laurent Cozic 2021-09-27 18:34:12 +01:00
parent 8c9331cf61
commit 24945a0d3e
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
packages/server/src/routes/index/logout.ts
View File

@ -11,6 +11,7 @@ const router = new Router(RouteType.Web);
router.post('logout', async (_path: SubPath, ctx: AppContext) => {
const sessionId = contextSessionId(ctx, false);
cookieSet(ctx, 'sessionId', '');
cookieSet(ctx, 'adminSessionId', '');
await ctx.joplin.models.session().logout(sessionId);
return redirect(ctx, `${config().baseUrl}/login`);
});