Make a basic check date functon, and EVEN if the user does NOT have a

lastCheckCookie, they are forced to relog, as there is somewhat of a
risk it might be a bad attacker, also postgres has limits, and I don't
what to blow it all, so you need the lastCheck Cookie as is. (Yes this
is a super important commit :D
This commit is contained in:
吳元皓 2025-05-17 21:22:48 +08:00
parent 383ad2e467
commit 0e26a23261

View File

@ -2,8 +2,24 @@
import postgres from "~/server/components/postgres"; import postgres from "~/server/components/postgres";
export default defineEventHandler(async (event) => { export default defineEventHandler(async (event) => {
const loginCookie = getCookie(event, "session"); const loginCookie = getCookie(event, "session");
const lastCheckCookie = getCookie(event, "last_check");
if (!lastCheckCookie && loginCookie) {
deleteCookie(event, "session");
deleteCookie(event, "lastCheckCookie");
return {
auth: false,
user: null,
};
}
const checkDate = new Date().toLocaleString();
console.log(checkDate);
setCookie(event, "lastCheckCookie", checkDate, {
httpOnly: true,
secure: process.env.NODE_ENV === "production",
path: "/",
});
return { return {
auth: "true", auth: true,
user: "testing", user: "testing",
}; };
}); });