From b73e89369337b03307a9f355ed3ebc5f83e30cd2 Mon Sep 17 00:00:00 2001 From: Jeremy Mitchell Date: Wed, 12 Jul 2017 12:53:01 -0600 Subject: [PATCH] clears token that was generated during user registration process as updating your current user signifies that your registration is complete and token is no longer needed --- traffic_ops/app/lib/API/User.pm | 2 ++ 1 file changed, 2 insertions(+) diff --git a/traffic_ops/app/lib/API/User.pm b/traffic_ops/app/lib/API/User.pm index 117030d540..c83d9efaaf 100644 --- a/traffic_ops/app/lib/API/User.pm +++ b/traffic_ops/app/lib/API/User.pm @@ -564,6 +564,8 @@ sub update_current { if ( defined( $user->{"country"} ) ) { $db_user->{"country"} = $user->{"country"}; } + # token is intended for new user registrations and on current user update, it should be cleared from the db + $db_user->{"token"} = undef; $dbh->update($db_user); return $self->success_message("UserProfile was successfully updated."); }