fix: Improve session handling in account v2 (blockscout#11420)

maxaleks · Jan 16, 2025 · 967aa77 · 967aa77
1 parent 9fb7db3
commit 967aa77
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/...block_scout_web/lib/block_scout_web/controllers/account/api/v2/authenticate_controller.ex b/...block_scout_web/lib/block_scout_web/controllers/account/api/v2/authenticate_controller.ex
@@ -259,6 +259,7 @@ defmodule BlockScoutWeb.Account.API.V2.AuthenticateController do
          {:identity, %Identity{} = identity} <- {:identity, Identity.find_identity(uid)} do
       conn
       |> Conn.fetch_session()
+      |> configure_session(renew: true)
       |> put_session(:current_user, session)
       |> delete_resp_cookie(Application.get_env(:block_scout_web, :invalid_session_key))
       |> put_status(200)

diff --git a/apps/block_scout_web/lib/block_scout_web/controllers/account/api/v2/user_controller.ex b/apps/block_scout_web/lib/block_scout_web/controllers/account/api/v2/user_controller.ex
@@ -35,6 +35,7 @@ defmodule BlockScoutWeb.Account.API.V2.UserController do
 
         {:new, session} ->
           conn
+          |> configure_session(renew: true)
           |> put_session(:current_user, session)
           |> put_status(200)
           |> render(:user_info, %{identity: identity |> Identity.put_session_info(session)})