fix: refresh session cookie après update_account
Le cookie de session n'était pas mis à jour après modification du compte → le template re-rendait avec les anciennes données au rechargement. Maintenant le serveur émet un nouveau cookie avec les données fraîches.
This commit is contained in:
@@ -1395,5 +1395,10 @@ async def update_account(request: Request):
|
||||
return JSONResponse({"error": "Password must be at least 6 characters"}, status_code=400)
|
||||
conn.execute("UPDATE users SET password_hash=? WHERE id=?", (hash_password(pw), uid))
|
||||
conn.commit()
|
||||
row = conn.execute("SELECT id, login, full_name, email, is_admin FROM users WHERE id=?", (uid,)).fetchone()
|
||||
return {"status": "ok", "user": dict(row)}
|
||||
row = conn.execute("SELECT * FROM users WHERE id=?", (uid,)).fetchone()
|
||||
user_data = dict(row)
|
||||
# Refresh session cookie with updated data
|
||||
new_session = SessionManager.create_session(user_data)
|
||||
response = JSONResponse({"status": "ok", "user": {k: user_data[k] for k in ("id","login","full_name","email","is_admin")}})
|
||||
response.set_cookie("flowdeck_session", new_session, httponly=True, max_age=86400 * 7, samesite="lax", path="/")
|
||||
return response
|
||||
|
||||
Reference in New Issue
Block a user