Merge pull request from GHSA-23q2-5gf8-gjpp

louislam · Apr 18, 2024 · 7a9e2f5 · 7a9e2f5
1 parent 7b5d2a7
commit 7a9e2f5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/server/server.js b/server/server.js
@@ -1205,6 +1205,12 @@ let needSetup = false;
                     await doubleCheckPassword(socket, currentPassword);
                 }
 
+                // Log out all clients if enabling auth
+                // GHSA-23q2-5gf8-gjpp
+                if (currentDisabledAuth && !data.disableAuth) {
+                    server.disconnectAllSocketClients(socket.userID, socket.id);
+                }
+
                 const previousChromeExecutable = await Settings.get("chromeExecutable");
                 const previousNSCDStatus = await Settings.get("nscd");