lsm/Orchard
1
0
Fork 0
mirror of https://github.com/OrchardCMS/Orchard.git synced 2025-11-24 16:53:10 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Actually signout user on change password. (#8478)

Browse Source 
This is controlled by the existing setting that would invalidate all extant auth cookies on change password.
This commit is contained in:
Matteo Piovanelli
2021-05-28 08:45:14 +02:00
committed by GitHub
parent d2d77f78eb
commit 10963275c3
1 changed files with 12 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
View File

@@ -1,4 +1,4 @@
using System;
using System;
using System.Collections.Generic;
using System.Diagnostics.CodeAnalysis;
using System.Text.RegularExpressions;
@@ -257,15 +257,25 @@ namespace Orchard.Users.Controllers {
ViewData["UppercaseRequirement"] = membershipSettings.GetPasswordUppercaseRequirement();
ViewData["SpecialCharacterRequirement"] = membershipSettings.GetPasswordSpecialRequirement();
ViewData["NumberRequirement"] = membershipSettings.GetPasswordNumberRequirement();
ViewData["InvalidateOnPasswordChange"] = _orchardServices.WorkContext
var shouldSignout = _orchardServices.WorkContext
.CurrentSite.As<SecuritySettingsPart>()
.ShouldInvalidateAuthOnPasswordChanged;
ViewData["InvalidateOnPasswordChange"] = shouldSignout;
if (!ValidateChangePassword(currentPassword, newPassword, confirmPassword)) {
return View();
}
if (PasswordChangeIsSuccess(currentPassword, newPassword, _orchardServices.WorkContext.CurrentUser.UserName)) {
if (shouldSignout) {
_authenticationService.SignOut();
var loggedUser = _authenticationService.GetAuthenticatedUser();
if (loggedUser != null) {
_userEventHandler.LoggedOut(loggedUser);
}
}
return RedirectToAction("ChangePasswordSuccess");
}
else {