1
0
Fork 0
mirror of synced 2024-06-26 10:10:57 +12:00

fix(jwt): correct session validation

This commit is contained in:
Torsten Dittmann 2021-07-19 17:09:39 +02:00 committed by GitHub
parent 14cd81e4a8
commit c2f1389a56
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -467,7 +467,7 @@ App::setResource('user', function($mode, $project, $console, $request, $response
$user = $projectDB->getDocument($jwtUserId);
}
if (empty($user->search('$id', $jwtSessionId, $user->getAttribute('tokens')))) { // Match JWT to active token
if (empty($user->search('$id', $jwtSessionId, $user->getAttribute('sessions')))) { // Match JWT to active token
$user = new Document(['$id' => '', '$collection' => Database::SYSTEM_COLLECTION_USERS]);
}
}