fix: #9007 revoke old sessions after adding

NodeBB · Nov 30, 2020 · d46740f · d46740f
1 parent 54dc449
commit d46740f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/user/auth.js b/src/user/auth.js
@@ -107,8 +107,8 @@ module.exports = function (User) {
 			return;
 		}
 		await cleanExpiredSessions(uid);
-		await revokeSessionsAboveThreshold(uid, meta.config.maxUserSessions);
 		await db.sortedSetAdd('uid:' + uid + ':sessions', Date.now(), sessionId);
+		await revokeSessionsAboveThreshold(uid, meta.config.maxUserSessions);
 	};
 
 	async function revokeSessionsAboveThreshold(uid, maxUserSessions) {