jmarya/based
jmarya/based
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity

fix: limit end_session to the users own sessions
All checks were successful
ci/woodpecker/push/test Pipeline was successful
Details

Browse source
This commit is contained in:
JMARyA 2025-01-09 14:34:01 +01:00
parent 29cf990363
commit eccbc3c3d6
Signed by: jmarya
GPG key ID: 901B2ADDF27C2263
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
src/auth/session.rs
View file

@ -61,8 +61,9 @@ impl Sessions for User {
/// End a user session /// End a user session
async fn end_session(&self, id: &str) { async fn end_session(&self, id: &str) {
sqlx::query("DELETE FROM user_session WHERE id = $1") sqlx::query("DELETE FROM user_session WHERE id = $1 AND \"user\" = $2")
.bind(id) .bind(id)
.bind(&self.username)
.execute(get_pg!()) .execute(get_pg!())
.await .await
.unwrap(); .unwrap();