feat: Additional httpOnly token for enhanced security in browsers

2025-12-19 01:12:02 +03:00 · 2024-09-01 09:31:04 +02:00
parent 4176a62f1a
commit 9699fbe76a
18 changed files with 171 additions and 48 deletions
--- a/server/api/helpers/users/update-one.js
+++ b/server/api/helpers/users/update-one.js
@@ -68,7 +68,7 @@ module.exports = {

      Object.assign(values, {
        password: bcrypt.hashSync(values.password, 10),
-        passwordChangedAt: new Date().toISOString(),
+        passwordChangedAt: new Date().toUTCString(), // FIXME: hack
      });
    }