This commit is contained in:
Timothy Jaeryang Baek
2025-09-08 18:17:11 +04:00
parent 7693d0e2b0
commit fc11e4384f
3 changed files with 7 additions and 2 deletions

View File

@@ -677,6 +677,7 @@ async def signup(request: Request, response: Response, form_data: SignupForm):
async def signout(request: Request, response: Response): async def signout(request: Request, response: Response):
response.delete_cookie("token") response.delete_cookie("token")
response.delete_cookie("oui-session") response.delete_cookie("oui-session")
response.delete_cookie("oauth_id_token")
oauth_session_id = request.cookies.get("oauth_session_id") oauth_session_id = request.cookies.get("oauth_session_id")
if oauth_session_id: if oauth_session_id:

View File

@@ -313,6 +313,10 @@ def get_current_user(
# Delete the token cookie # Delete the token cookie
if request.cookies.get("token"): if request.cookies.get("token"):
response.delete_cookie("token") response.delete_cookie("token")
if request.cookies.get("oauth_id_token"):
response.delete_cookie("oauth_id_token")
# Delete OAuth session if present # Delete OAuth session if present
if request.cookies.get("oauth_session_id"): if request.cookies.get("oauth_session_id"):
response.delete_cookie("oauth_session_id") response.delete_cookie("oauth_session_id")

View File

@@ -824,7 +824,7 @@ class OAuthManager:
if "expires_in" in token and "expires_at" not in token: if "expires_in" in token and "expires_at" not in token:
token["expires_at"] = datetime.now().timestamp() + token["expires_in"] token["expires_at"] = datetime.now().timestamp() + token["expires_in"]
session_id = await OAuthSessions.create_session( session = OAuthSessions.create_session(
user_id=user.id, user_id=user.id,
provider=provider, provider=provider,
token=token, token=token,
@@ -832,7 +832,7 @@ class OAuthManager:
response.set_cookie( response.set_cookie(
key="oauth_session_id", key="oauth_session_id",
value=session_id, value=session.id,
httponly=True, httponly=True,
samesite=WEBUI_AUTH_COOKIE_SAME_SITE, samesite=WEBUI_AUTH_COOKIE_SAME_SITE,
secure=WEBUI_AUTH_COOKIE_SECURE, secure=WEBUI_AUTH_COOKIE_SECURE,