mirror of
https://github.com/hpware/news-analyze.git
synced 2025-06-23 15:51:01 +08:00
Make a basic check date functon, and EVEN if the user does NOT have a
lastCheckCookie, they are forced to relog, as there is somewhat of a risk it might be a bad attacker, also postgres has limits, and I don't what to blow it all, so you need the lastCheck Cookie as is. (Yes this is a super important commit :D
This commit is contained in:
parent
383ad2e467
commit
0e26a23261
@ -2,8 +2,24 @@
|
||||
import postgres from "~/server/components/postgres";
|
||||
export default defineEventHandler(async (event) => {
|
||||
const loginCookie = getCookie(event, "session");
|
||||
const lastCheckCookie = getCookie(event, "last_check");
|
||||
if (!lastCheckCookie && loginCookie) {
|
||||
deleteCookie(event, "session");
|
||||
deleteCookie(event, "lastCheckCookie");
|
||||
return {
|
||||
auth: false,
|
||||
user: null,
|
||||
};
|
||||
}
|
||||
const checkDate = new Date().toLocaleString();
|
||||
console.log(checkDate);
|
||||
setCookie(event, "lastCheckCookie", checkDate, {
|
||||
httpOnly: true,
|
||||
secure: process.env.NODE_ENV === "production",
|
||||
path: "/",
|
||||
});
|
||||
return {
|
||||
auth: "true",
|
||||
auth: true,
|
||||
user: "testing",
|
||||
};
|
||||
});
|
||||
|
Loading…
x
Reference in New Issue
Block a user