github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-21 18:12:32 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FEATURE: per client user tokens

Browse Source 
Revamped system for managing authentication tokens.

- Every user has 1 token per client (web browser)
- Tokens are rotated every 10 minutes

New system migrates the old tokens to "legacy" tokens,
so users still remain logged on.

Also introduces weekly job to expire old auth tokens.
This commit is contained in:
Sam
2017-01-31 17:21:37 -05:00
parent 2dec731da3
commit ff49f72ad9
19 changed files with 495 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
app/controllers/admin/users_controller.rb
View File

@ -72,8 +72,7 @@ class Admin::UsersController < Admin::AdminController
def log_out
if @user
@user.auth_token = nil
@user.save!
@user.user_auth_tokens.destroy_all
@user.logged_out
render json: success_json
else