X-Git-Url: https://git.auder.net/?a=blobdiff_plain;f=server%2Froutes%2Fusers.js;h=b657920ef5e7a7b78fc4083cc12c974585e1073b;hb=98f485791e915563996de4f37430b285ffc773ae;hp=4b142d71ca57c0dd6c56d5df6d44ece98193a354;hpb=a7f9f050e44080e8caf888e3b230660abffa2400;p=vchess.git diff --git a/server/routes/users.js b/server/routes/users.js index 4b142d71..b657920e 100644 --- a/server/routes/users.js +++ b/server/routes/users.js @@ -17,7 +17,6 @@ router.get("/whoami", access.ajax, (req,res) => { }); }; const anonymous = {name:"", email:"", id:0, notify:false}; - console.log(req.cookies); //TODO: cookie not found after authenticate ? if (!req.cookies.token) return callback(anonymous); UserModel.getOne("sessionToken", req.cookies.token, function(err, user) { @@ -42,9 +41,7 @@ function setAndSendLoginToken(subject, to, res) params.siteURL + "/#/authenticate/" + token + "\\n" + "Token will expire in " + params.token.expire/(1000*60) + " minutes." sendEmail(params.mail.noreply, to.email, subject, body, err => { - // "id" is generally the only info missing on client side, - // but the name is also unknown if log-in with the email. - res.json(err || {id: to.id, name: to.name}); + res.json(err || {}); }); }); } @@ -84,7 +81,7 @@ router.get('/sendtoken', access.unlogged, access.ajax, (req,res) => { router.get('/authenticate', access.unlogged, access.ajax, (req,res) => { UserModel.getOne("loginToken", req.query.token, (err,user) => { access.checkRequest(res, err, user, "Invalid token", () => { - // If token older than params.tokenExpire, do nothing + // If token older than params.tokenExpire, do nothing if (Date.now() > user.loginTime + params.token.expire) return res.json({errmsg: "Token expired"}); // Generate session token (if not exists) + destroy login token