From 7a9e2f5de69aa0bb884ead25d1dcc833bb8c6579 Mon Sep 17 00:00:00 2001 From: Louis Lam Date: Thu, 18 Apr 2024 10:08:31 -0700 Subject: [PATCH] Merge pull request from GHSA-23q2-5gf8-gjpp --- server/server.js | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/server/server.js b/server/server.js index 870986d5..3c66bad7 100644 --- a/server/server.js +++ b/server/server.js @@ -1205,6 +1205,12 @@ let needSetup = false; await doubleCheckPassword(socket, currentPassword); } + // Log out all clients if enabling auth + // GHSA-23q2-5gf8-gjpp + if (currentDisabledAuth && !data.disableAuth) { + server.disconnectAllSocketClients(socket.userID, socket.id); + } + const previousChromeExecutable = await Settings.get("chromeExecutable"); const previousNSCDStatus = await Settings.get("nscd");