shared frontend, UserAPI invalidate sessions, bugfixes, stuff

2023-02-09 23:55:30 +01:00
parent 8a09fc1f2d
commit 5acd13b945
15 changed files with 164 additions and 78 deletions
--- a/Core/API/TfaAPI.class.php
+++ b/Core/API/TfaAPI.class.php
@@ -189,6 +189,11 @@ namespace Core\API\TFA {
      $sql = $this->context->getSQL();
      $this->success = $twoFactorToken->confirm($sql) !== false;
      $this->lastError = $sql->getLastError();
+
+      if ($this->success) {
+        $this->context->invalidateSessions(true);
+      }
+
      return $this->success;
    }
  }
@@ -315,6 +320,7 @@ namespace Core\API\TFA {

        if ($this->success) {
          $this->result["twoFactorToken"] = $twoFactorToken->jsonSerialize();
+          $this->context->invalidateSessions();
        }
      }