Description:
force log out when password change
Commit status:
[Not Reviewed]
References:
Diff options:
Comments:
0 Commit comments
0 Inline Comments
Unresolved TODOs:
There are no unresolved TODOs
r884:490fbe2ccf0b - - 2 files changed: 6 inserted, 0 deleted
@@ -111,12 +111,17 | |||
|
111 | 111 | unless is_request_ip_allowed? |
|
112 | 112 | unauthorized_redirect 'Your IP is not allowed to login at this time.' |
|
113 | 113 | return false |
|
114 | 114 | end |
|
115 | 115 | end |
|
116 | 116 | |
|
117 | + # check if password is changed | |
|
118 | + if session[:last_password_hash] != @current_user.hashed_password | |
|
119 | + unauthorized_redirect 'You are forced to log out.' | |
|
120 | + end | |
|
121 | + | |
|
117 | 122 | if GraderConfiguration.multicontests? |
|
118 | 123 | return true if @current_user.admin? |
|
119 | 124 | begin |
|
120 | 125 | if @current_user.contest_stat(true).forced_logout |
|
121 | 126 | flash[:notice] = 'You have been automatically logged out.' |
|
122 | 127 | redirect_to :controller => 'main', :action => 'index' |
@@ -31,12 +31,13 | |||
|
31 | 31 | #log different login |
|
32 | 32 | end |
|
33 | 33 | end |
|
34 | 34 | |
|
35 | 35 | #process logging in |
|
36 | 36 | session[:user_id] = user.id |
|
37 | + session[:last_password_hash] = user.hashed_password | |
|
37 | 38 | session[:admin] = user.admin? |
|
38 | 39 | |
|
39 | 40 | # clear forced logout flag for multicontests contest change |
|
40 | 41 | if GraderConfiguration.multicontests? |
|
41 | 42 | contest_stat = user.contest_stat |
|
42 | 43 | if contest_stat.respond_to? :forced_logout |
You need to be logged in to leave comments.
Login now