fix: #9007 revoke old sessions after adding

4 years ago · d46740f860
parent 54dc449fb9
commit d46740f860
1 changed files with 1 additions and 1 deletions
--- a/src/user/auth.js
+++ b/src/user/auth.js
@ -107,8 +107,8 @@ module.exports = function (User) {
 			return;
 		}
 		await cleanExpiredSessions(uid);
-		await revokeSessionsAboveThreshold(uid, meta.config.maxUserSessions);
 		await db.sortedSetAdd('uid:' + uid + ':sessions', Date.now(), sessionId);
+		await revokeSessionsAboveThreshold(uid, meta.config.maxUserSessions);
 	};

 	async function revokeSessionsAboveThreshold(uid, maxUserSessions) {