Browse Source

Stop rolling device token

pull/4951/head
Timshel 1 year ago
parent
commit
065f80e2c2
  1. 3
      src/auth.rs
  2. 4
      src/db/models/device.rs

3
src/auth.rs

@ -1098,8 +1098,7 @@ pub async fn refresh_tokens(refresh_token: &str, conn: &mut DbConn) -> ApiResult
Some(device) => device,
};
// Roll the Device.refresh_token this way it invalides old JWT refresh_token
device.roll_refresh_token();
// Save to update `updated_at`.
device.save(conn).await?;
let user = match User::find_by_uuid(&device.user_uuid, conn).await {

4
src/db/models/device.rs

@ -48,10 +48,6 @@ impl Device {
}
}
pub fn roll_refresh_token(&mut self) {
self.refresh_token = crypto::encode_random_bytes::<64>(BASE64URL)
}
pub fn refresh_twofactor_remember(&mut self) -> String {
let twofactor_remember = crypto::encode_random_bytes::<180>(BASE64);
self.twofactor_remember = Some(twofactor_remember.clone());

Loading…
Cancel
Save