fix: set no-store cache control on jwt renew response

904260fd · Nicolas Giard · GitHub · 1238d614 · 904260fd
Unverified Commit 904260fd authored May 23, 2024 by Nicolas Giard Committed by GitHub May 23, 2024
Hide whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

auth.js server/core/auth.js +3 -0

No files found.
--- a/server/core/auth.js
+++ b/server/core/auth.js
@@ -156,6 +156,9 @@ module.exports = {
          } else {
            res.cookie('jwt', newToken.token, { expires: DateTime.utc().plus({ days: 365 }).toJSDate() })
          }
+
+          // Avoid caching this response
+          res.set('Cache-Control', 'no-store')
        } catch (errc) {
          WIKI.logger.warn(errc)
          return next()