caterium/caterium-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: close temporary password verification session

Browse Source
This commit is contained in:
pavlov346346-source 2026-09-11 10:14:55 +03:00
parent 6ceea3b5d6
commit ab8118a539
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
supabase/functions/caterium-change-password/index.ts
View File

@ -78,6 +78,11 @@ Deno.serve(async (req: Request) => {
if (verified.error || !verified.data?.user || verified.data.user.id !== user.id) { if (verified.error || !verified.data?.user || verified.data.user.id !== user.id) {
return reply(req, { error: "Текущий пароль введён неверно.", code: "current_password_invalid" }, 400); return reply(req, { error: "Текущий пароль введён неверно.", code: "current_password_invalid" }, 400);
} }
try {
await verifier.auth.signOut({ scope: "local" });
} catch (error) {
console.warn("[caterium-change-password] verifier session cleanup failed", error);
}
const service = createClient(url, serviceKey, { const service = createClient(url, serviceKey, {
auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false }, auth: { persistSession: false, autoRefreshToken: false, detectSessionInUrl: false },