This commit is contained in:
Aevann1 2022-02-14 01:07:13 +02:00
parent 23668772e5
commit 8f1ab79f95
3 changed files with 40 additions and 13 deletions

View file

@ -22,9 +22,9 @@ def get_logged_in_user():
nonce = session.get("login_nonce", 0)
id = int(lo_user)
v = g.db.query(User).filter_by(id=id).one_or_none()
if v.id != id: abort(400)
if not v or nonce < v.login_nonce: return None
if v.id != id: abort(400)
v.client = None
if request.method != "GET":