github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-21 18:12:32 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: Do not allow revoking the token of current session. (#6472)

Browse Source 
* FIX: Do not allow revoking the token of current session.

* DEV: Add getter of current auth_token from Guardian.
This commit is contained in:
Bianca Nenciu
2018-10-12 02:40:48 +03:00
committed by Sam
parent e68ecf1f1d
commit 048cdfbcfa
5 changed files with 28 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/guardian.rb
View File

@ -381,6 +381,13 @@ class Guardian
(components - Theme.components_for(parent)).empty?
end
def auth_token
return nil if !request&.cookies[Auth::DefaultCurrentUserProvider::TOKEN_COOKIE]
cookie = request.cookies[Auth::DefaultCurrentUserProvider::TOKEN_COOKIE]
UserAuthToken.hash_token(cookie)
end
private
def is_my_own?(obj)