You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Julian Lam d6e3f3f058
fix: #8142, broken site if no server-side session (#8148)
* fix: #8142, broken site if no server-side session

During the `addHeader` middleware, a check is now done to see if
`req.session.meta` is present. This value is only present if the user
has a valid server-side session.  If it is missing, then it is probably
safe to assume that the server-side session was deleted (either
intentionally or accidentally). In that scenario, the client-side cookie
should be cleared.

Also, there was an issue where the sessionRefresh flag was never cleared
after a successful login, so that was fixed too.

* feat: exported method to get cookie config

* fix: don't clear cookie if cookie is being set

* fix: socket.io tests

Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
5 years ago
..
images feat: revamp email templates to be more style agnostic (#7375) 6 years ago
language Latest translations and fallbacks 5 years ago
less feat: #5272, allow changing user groups from manage users page 6 years ago
src fix: #8142, broken site if no server-side session (#8148) 5 years ago
uploads tweak gitignores, closes #5250 9 years ago
vendor Fix ACP alerts to use same system as client (#6396) 7 years ago
.eslintrc Remove public eslint `templates` global 8 years ago
.jshintrc ESlint no-undef, remove global comments 8 years ago
503.html fix mixed content warning on 503 status page and installer 9 years ago
favicon.ico added favicon 12 years ago
js-enabled.css fix: removal of scroll anchoring code in favour of browser handling 7 years ago
logo.png Pass tests 8 years ago