fix: API key incorrectly forces token revalidation
This commit is contained in:
parent
8f6cba262f
commit
1404d6343e
@ -122,7 +122,7 @@ module.exports = {
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Check if user / group is in revocation list
|
// Check if user / group is in revocation list
|
||||||
if (user && !mustRevalidate) {
|
if (user && !user.api && !mustRevalidate) {
|
||||||
const uRevalidate = WIKI.auth.revocationList.get(`u${_.toString(user.id)}`)
|
const uRevalidate = WIKI.auth.revocationList.get(`u${_.toString(user.id)}`)
|
||||||
if (uRevalidate && user.iat < uRevalidate) {
|
if (uRevalidate && user.iat < uRevalidate) {
|
||||||
mustRevalidate = true
|
mustRevalidate = true
|
||||||
|
Loading…
Reference in New Issue
Block a user