nodebb-plugin-session-sharing 8.0.3 → 8.0.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/library.js CHANGED
@@ -137,7 +137,7 @@ plugin.getUser = async (remoteId) => {
137
137
  };
138
138
 
139
139
  plugin.process = async (token) => {
140
- const payload = await jwt.verify(token, plugin.settings.secret);
140
+ const payload = await jwt.verify(token, plugin.settings.secret, { algorithms: ['HS256'] });
141
141
  const userData = await plugin.normalizePayload(payload);
142
142
  const [uid, isNewUser] = await plugin.findOrCreateUser(userData);
143
143
  await plugin.updateUserProfile(uid, userData, isNewUser);
@@ -458,6 +458,11 @@ plugin.addMiddleware = async function ({ req, res }) {
458
458
  const wasForceLogin = !!req.session.forceLogin;
459
459
  delete req.session.forceLogin;
460
460
  await nbbAuthController.onSuccessfulLogin(req, uid, true, wasForceLogin);
461
+ if (wasForceLogin && req.session.returnTo) {
462
+ const url = req.session.returnTo;
463
+ delete req.session.returnTo;
464
+ res.redirect(nconf.get('relative_path') + url);
465
+ }
461
466
  return;
462
467
  }
463
468