fix #2630 【システム】ログアウトしても代理ログイン情報が記録されたまま (#2682)

Co-authored-by: Đỗ Văn Hùng <dovanhungk57@gmail.com>
baserproject · Aug 17, 2023 · da26740 · da26740
1 parent 4eb2c42
commit da26740
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/plugins/baser-core/src/Controller/Admin/UsersController.php b/plugins/baser-core/src/Controller/Admin/UsersController.php
@@ -159,6 +159,12 @@ public function back_agent(UsersServiceInterface $service)
      */
     public function logout(UsersServiceInterface $service)
     {
+        // 代理ログインした場合、ログアウト前にセッションを削除する。
+        if (BcUtil::isAgentUser()) {
+            $session = $this->request->getSession();
+            $session->delete('AuthAgent');
+        }
+
         /* @var User $user */
         $user = $this->Authentication->getIdentity();
         $service->logout($this->request, $this->response, $user->id);