CSRF Token + small fixes

2020-06-14 19:39:52 +02:00
parent 8fc0b4bb05
commit f87fdc83ae
17 changed files with 83 additions and 16 deletions
--- a/core/Api/User/Login.class.php
+++ b/core/Api/User/Login.class.php
@@ -65,6 +65,7 @@ class Login extends Request {
          if(!($this->success = $this->user->createSession($uid, $stayLoggedIn))) {
            return $this->createError("Error creating Session: " . $sql->getLastError());
          } else {
+            $this->result["loggedIn"] = true;
            $this->result['logoutIn'] = $this->user->getSession()->getExpiresSeconds();
            $this->success = true;
          }