diff options
Diffstat (limited to 'src/api/login.rs')
| -rw-r--r-- | src/api/login.rs | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/src/api/login.rs b/src/api/login.rs index 57c1859..dc9d895 100644 --- a/src/api/login.rs +++ b/src/api/login.rs @@ -272,6 +272,7 @@ fn new_login( exp, session: token::new_session(), session_exp: ended_with(session_exp, exp, lifetime), + login_exp: session_exp, limit, } } @@ -532,7 +533,10 @@ pub(crate) async fn end_session( /// registry, else on this node only. async fn end(state: &AppState, claims: &Claims, by: &str) -> Result<(), ApiError> { let path = registry::session_path(&claims.user, &claims.session); - let until = claims.session_exp; + // The login's end, not this token's refresh deadline (a token handed to another + // member's dashboard ends its session in minutes): every token of the session is + // refused until it. + let until = claims.login_exp.max(claims.session_exp); let recorded = if state.is_ready().await { state .mutate_doc_for(Some(by.to_owned()), Sign::Protocol, move |doc| { |