feat(core): Prevent session hijacking (#9057)

2024-04-09 11:20:35 +02:00
parent 5793e5644a
commit 28261047c3
15 changed files with 124 additions and 53 deletions
--- a/packages/cli/src/controllers/auth.controller.ts
+++ b/packages/cli/src/controllers/auth.controller.ts
@@ -94,7 +94,7 @@ export class AuthController {
 				}
 			}

-			this.authService.issueCookie(res, user);
+			this.authService.issueCookie(res, user, req.browserId);
 			void this.internalHooks.onUserLoginSuccess({
 				user,
 				authenticationMethod: usedAuthenticationMethod,