Parcourir la source

Do not set remember me cookie when days are set to zero

Torkel Ödegaard il y a 9 ans
Parent
commit
2a557f67d2
1 fichiers modifiés avec 4 ajouts et 2 suppressions
  1. 4 2
      pkg/api/login.go

+ 4 - 2
pkg/api/login.go

@@ -126,8 +126,10 @@ func loginUserWithUser(user *m.User, c *middleware.Context) {
 	}
 	}
 
 
 	days := 86400 * setting.LogInRememberDays
 	days := 86400 * setting.LogInRememberDays
-	c.SetCookie(setting.CookieUserName, user.Login, days, setting.AppSubUrl+"/")
-	c.SetSuperSecureCookie(util.EncodeMd5(user.Rands+user.Password), setting.CookieRememberName, user.Login, days, setting.AppSubUrl+"/")
+	if days > 0 {
+		c.SetCookie(setting.CookieUserName, user.Login, days, setting.AppSubUrl+"/")
+		c.SetSuperSecureCookie(util.EncodeMd5(user.Rands+user.Password), setting.CookieRememberName, user.Login, days, setting.AppSubUrl+"/")
+	}
 
 
 	c.Session.Set(middleware.SESS_KEY_USERID, user.Id)
 	c.Session.Set(middleware.SESS_KEY_USERID, user.Id)
 }
 }