proper session path

mitoteam · Apr 9, 2024 · 14608e4 · 14608e4
1 parent 8b5576e
commit 14608e4
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/app/api_requests.go b/app/api_requests.go
@@ -49,30 +49,32 @@ func (r *apiRequest) HealthCheck() {
 
 func (r *apiRequest) Password() {
 	if r.getInData("password") == Settings.GuiPassword {
-		r.setStatus("ok", "You are authorized!")
-
 		// Set user as authenticated
-		r.session.Clear()
 		r.session.Set("auth", true)
 
 		r.session.Options(sessions.Options{
 			MaxAge: 24 * 3600,
+			Path:   "/",
 		})
 
 		r.session.Save()
+
+		r.setStatus("ok", "You are authorized!")
 	} else {
 		r.setStatus("danger", "Wrong password")
 	}
 }
 
 func (r *apiRequest) Logout() {
 	r.session.Clear()
-	r.session.Save()
 
 	r.session.Options(sessions.Options{
-		MaxAge: 0,
+		MaxAge: -1, //remove
+		Path:   "/",
 	})
 
+	r.session.Save()
+
 	r.setStatus("info", "Good bye!")
 }