Просмотр исходного кода

Fixed race condition: AJAX data fetch requests re-set sessions that should get deleted by logout request.

Thorsten Eckel 6 лет назад
Родитель
Сommit
295844c72e
1 измененных файлов с 2 добавлено и 1 удалено
  1. 2 1
      app/controllers/sessions_controller.rb

+ 2 - 1
app/controllers/sessions_controller.rb

@@ -114,12 +114,13 @@ class SessionsController < ApplicationController
   # "Delete" a login, aka "log the user out"
   # "Delete" a login, aka "log the user out"
   def destroy
   def destroy
 
 
+    reset_session
+
     # Remove the user id from the session
     # Remove the user id from the session
     @_current_user = nil
     @_current_user = nil
 
 
     # reset session
     # reset session
     request.env['rack.session.options'][:expire_after] = nil
     request.env['rack.session.options'][:expire_after] = nil
-    session.clear
 
 
     render json: {}
     render json: {}
   end
   end