0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
ghost/core
Simon Backx f732b0181d
Fixed last_seen updated for suspended users (#14715)
refs https://github.com/TryGhost/Team/issues/1461

- A suspended user was able to make it through the Express middlewares to the `updateUserLastSeen` middleware, until it was halted when checking the user permissions in the API pipeline. This was only the case for session logins, not for API keys.
- For API keys, the user status is checked:
6dc3f1bf56/core/server/services/auth/api-key/admin.js (L178-L181)
- In the session middleware, the `findUserById` in `getUserForSession` didn't filter on the active status of users:
be4146e324/core/server/services/auth/session/middleware.js (L22-L27)
- This has been fixed now by updating the sessionService's `findUserById` method.
2022-05-10 13:34:12 +02:00
..
client@5751899e5b Updated Admin to v4.46.0 2022-04-28 15:29:18 +01:00
frontend 🔥 Removed {{author}} helper support 2022-05-02 17:59:48 +08:00
server Fixed last_seen updated for suspended users (#14715) 2022-05-10 13:34:12 +02:00
shared Deleted membersActivity flag 2022-05-10 11:19:58 +01:00
app.js
boot.js Removed api:versions from config 2022-05-06 08:22:05 +01:00
bridge.js Removed sync method from route settings loader 2022-04-28 15:37:09 +01:00