feat/Update_Controllers_to_Allow_for_Premium_Membership
This commit is contained in:
@@ -18,11 +18,13 @@ public sealed class SessionsController : ControllerBase
|
||||
{
|
||||
private readonly UserManager<ApplicationUser> _users;
|
||||
private readonly JobTrackerContext _db;
|
||||
private readonly ExternalOrigin _externalOrigin;
|
||||
|
||||
public SessionsController(UserManager<ApplicationUser> users, JobTrackerContext db)
|
||||
public SessionsController(UserManager<ApplicationUser> users, JobTrackerContext db, ExternalOrigin? externalOrigin = null)
|
||||
{
|
||||
_users = users;
|
||||
_db = db;
|
||||
_externalOrigin = externalOrigin ?? ExternalOrigin.Parse(null, production: false);
|
||||
}
|
||||
|
||||
public sealed record SessionDto(string Id, string? DeviceLabel, DateTimeOffset CreatedAtUtc, DateTimeOffset LastSeenAtUtc, DateTimeOffset ExpiresAtUtc, bool IsCurrentSession);
|
||||
@@ -71,8 +73,7 @@ public sealed class SessionsController : ControllerBase
|
||||
|
||||
if (string.Equals(id, CurrentSid, StringComparison.Ordinal))
|
||||
{
|
||||
var secure = Request.IsHttps || string.Equals(Request.Headers["X-Forwarded-Proto"], "https", StringComparison.OrdinalIgnoreCase);
|
||||
Response.Cookies.Delete(AuthSessionOptions.SessionCookieName, AuthSessionOptions.BuildExpiredCookie(secure));
|
||||
Response.Cookies.Delete(AuthSessionOptions.SessionCookieName, AuthSessionOptions.BuildExpiredCookie(_externalOrigin.UsesHttps));
|
||||
}
|
||||
|
||||
return NoContent();
|
||||
|
||||
Reference in New Issue
Block a user