HttpCreds: Delete password from old location. owncloud#2186

ckamm · Mar 26, 2015 · 6b1ba78 · 6b1ba78
1 parent 3cef771
commit 6b1ba78
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/src/libsync/creds/httpcredentials.cpp b/src/libsync/creds/httpcredentials.cpp
@@ -336,6 +336,13 @@ void HttpCredentials::invalidateToken()
     job->setKey(kck);
     job->start();
 
+    // Also ensure the password is deleted from the deprecated place
+    // otherwise we'd possibly read and use it again and again.
+    DeletePasswordJob *job2 = new DeletePasswordJob(Theme::instance()->appName());
+    job2->setInsecureFallback(true);
+    job2->setKey(kck);
+    job2->start();
+
     _account->clearCookieJar();
 }