feat: Additional httpOnly token for enhanced security in browsers

2025-12-18 17:23:21 +03:00 · 2024-09-01 09:31:04 +02:00
parent d4043c9726
commit 50519f1bcd
18 changed files with 171 additions and 48 deletions
--- a/server/api/helpers/users/update-one.js
+++ b/server/api/helpers/users/update-one.js
@@ -68,7 +68,7 @@ module.exports = {

      Object.assign(values, {
        password: bcrypt.hashSync(values.password, 10),
-        passwordChangedAt: new Date().toISOString(),
+        passwordChangedAt: new Date().toUTCString(), // FIXME: hack
      });
    }