clear active sessions also on change password

2 years ago · d1901550d2
parent 3038e6c279
commit d1901550d2
1 changed files with 4 additions and 1 deletions
--- a/models/forms/changepassword.js
+++ b/models/forms/changepassword.js
@ -35,7 +35,10 @@ module.exports = async (req, res, next) => {
 	}

 	//change the password
-	await Accounts.changePassword(username, newPassword);
+	await Promise.all([
+		Accounts.changePassword(username, newPassword),
+		redis.deletePattern(`sess:*:${username}`),
+	]);

 	return dynamicResponse(req, res, 200, 'message', {
 		'title': 'Success',