Andreas/LibreChat
1
0
Fork 0
mirror of https://github.com/danny-avila/LibreChat.git synced 2025-09-22 08:12:00 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

fix(auth/refresh): send 403 res for invalid token to properly invalidate session (#1068)

Browse source
This commit is contained in:
Danny Avila 2023-10-17 08:34:14 -04:00 • committed by GitHub
parent 377f2c7c19
commit ddf56db316
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 12 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

4
api/server/controllers/AuthController.js
View file

@ -112,7 +112,9 @@ const refreshController = async (req, res) => {
res.status(401).send('Refresh token expired or not found for this user');
}
} catch (err) {
res.status(401).send('Invalid refresh token');
console.error('Refresh token error', refreshToken);
console.error(err);
res.status(403).send('Invalid refresh token');
}
};