X-Git-Url: https://git.auder.net/?p=vchess.git;a=blobdiff_plain;f=server%2Froutes%2Fusers.js;h=b657920ef5e7a7b78fc4083cc12c974585e1073b;hp=d633d8117c4b5e311cdf99618758ab9c0ca2d5af;hb=98f485791e915563996de4f37430b285ffc773ae;hpb=d737116438d84785f2cee6661b35c18fef039a64 diff --git a/server/routes/users.js b/server/routes/users.js index d633d811..b657920e 100644 --- a/server/routes/users.js +++ b/server/routes/users.js @@ -81,7 +81,7 @@ router.get('/sendtoken', access.unlogged, access.ajax, (req,res) => { router.get('/authenticate', access.unlogged, access.ajax, (req,res) => { UserModel.getOne("loginToken", req.query.token, (err,user) => { access.checkRequest(res, err, user, "Invalid token", () => { - // If token older than params.tokenExpire, do nothing + // If token older than params.tokenExpire, do nothing if (Date.now() > user.loginTime + params.token.expire) return res.json({errmsg: "Token expired"}); // Generate session token (if not exists) + destroy login token