regenerate session on user update

This commit is contained in:
Milos Stojanovic
2022-05-24 13:08:43 +02:00
parent 6e2b68f17f
commit fcd3995f64

View File

@@ -53,7 +53,7 @@ class JsonFile implements Service, AuthInterface
if ($user) { if ($user) {
foreach ($this->getUsers() as $u) { foreach ($this->getUsers() as $u) {
if ($u['username'] == $user->getUsername() && $hash == $u['password']) { if ($u['username'] == $user->getUsername() && $hash == $u['password'].$u['permissions'].$u['homedir'].$u['role']) {
return $user; return $user;
} }
} }
@@ -70,7 +70,7 @@ class JsonFile implements Service, AuthInterface
if ($u['username'] == $username && $this->verifyPassword($password, $u['password'])) { if ($u['username'] == $username && $this->verifyPassword($password, $u['password'])) {
$user = $this->mapToUserObject($u); $user = $this->mapToUserObject($u);
$this->store($user); $this->store($user);
$this->session->set(self::SESSION_HASH, $u['password']); $this->session->set(self::SESSION_HASH, $u['password'].$u['permissions'].$u['homedir'].$u['role']);
return true; return true;
} }