github/directus
1
1
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-04-25 03:00:53 -04:00
Code Issues Packages Projects Releases Wiki Activity

Account for share when updating stateful sessions (#22867)

Browse Source 
* Account for share when updating stateful sessions

* Add changeset
This commit is contained in:
Pascal Jufer
2024-06-27 16:57:29 +02:00
committed by GitHub
parent 440d9aa91c
commit 7ff5da6522
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
.changeset/shaggy-bees-search.md Normal file
View File

@@ -0,0 +1,5 @@
---
'@directus/api': patch
---
Added missing share ID when refreshing/updating share sessions

6
api/src/services/authentication.ts
View File

@@ -417,7 +417,10 @@ export class AuthenticationService {
// Clear expired sessions for the current user
await this.knex('directus_sessions')
.delete()
.where('user', '=', record.user_id)
.where({
user: record.user_id,
share: record.share_id,
})
.andWhere('expires', '<', new Date());
return {
@@ -476,6 +479,7 @@ export class AuthenticationService {
await this.knex('directus_sessions').insert({
token: newSessionToken,
user: sessionRecord['user_id'],
share: sessionRecord['share_id'],
expires: sessionExpiration,
ip: this.accountability?.ip,
user_agent: this.accountability?.userAgent,