aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2025-12-18 14:34:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

Make login sessions permanent (#1991)

Browse Source 
* Closes #1990 
* Make session cookies persist in the browser after close
This commit is contained in:
Nick Frost
2021-09-22 01:20:28 -04:00
committed by GitHub
parent d03692d002
commit 7d39539883
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CTFd/utils/security/auth.py
View File

@@ -15,6 +15,7 @@ def login_user(user):
session["id"] = user.id session["id"] = user.id
session["nonce"] = generate_nonce() session["nonce"] = generate_nonce()
session["hash"] = hmac(user.password) session["hash"] = hmac(user.password)
session.permanent = True
# Clear out any currently cached user attributes # Clear out any currently cached user attributes
clear_user_session(user_id=user.id) clear_user_session(user_id=user.id)
@@ -23,6 +24,7 @@ def login_user(user):
def update_user(user): def update_user(user):
session["id"] = user.id session["id"] = user.id
session["hash"] = hmac(user.password) session["hash"] = hmac(user.password)
session.permanent = True
# Clear out any currently cached user attributes # Clear out any currently cached user attributes
clear_user_session(user_id=user.id) clear_user_session(user_id=user.id)