Merge pull request from GHSA-23q2-5gf8-gjpp

2025-08-09 00:41:07 +08:00 · 2024-04-18 10:08:31 -07:00
parent 7b5d2a71ff
commit 7a9e2f5de6
1 changed files with 6 additions and 0 deletions
--- a/server/server.js
+++ b/server/server.js
@@ -1205,6 +1205,12 @@ let needSetup = false;
                    await doubleCheckPassword(socket, currentPassword);
                }

+                // Log out all clients if enabling auth
+                // GHSA-23q2-5gf8-gjpp
+                if (currentDisabledAuth && !data.disableAuth) {
+                    server.disconnectAllSocketClients(socket.userID, socket.id);
+                }
+
                const previousChromeExecutable = await Settings.get("chromeExecutable");
                const previousNSCDStatus = await Settings.get("nscd");