瀏覽代碼

Fix sessions being replaced needlessly (#4292)

master
Eugen Rochko 6 年之前
committed by GitHub
父節點
當前提交
8d6c3cd48a
共有 1 個文件被更改,包括 6 次插入2 次删除
  1. +6
    -2
      config/initializers/devise.rb

+ 6
- 2
config/initializers/devise.rb 查看文件

@@ -1,8 +1,12 @@
Warden::Manager.after_set_user except: :fetch do |user, warden|
SessionActivation.deactivate warden.cookies.signed['_session_id']
if user.session_active?(warden.cookies.signed['_session_id'] || warden.raw_session['auth_id'])
session_id = warden.cookies.signed['_session_id'] || warden.raw_session['auth_id']
else
session_id = user.activate_session(warden.request)
end

warden.cookies.signed['_session_id'] = {
value: user.activate_session(warden.request),
value: session_id,
expires: 1.year.from_now,
httponly: true,
}


Loading…
取消
儲存