From f1080b369a13ed29b458d9d72537e8e3f7f80a67 Mon Sep 17 00:00:00 2001 From: sp Date: Mon, 1 Mar 2021 02:12:42 +1100 Subject: [PATCH] make sure tracking cookie is enforced for login handler. --- apiV1login.go | 2 ++ apiv1.go | 1 - 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/apiV1login.go b/apiV1login.go index 33319c5..4795a88 100644 --- a/apiV1login.go +++ b/apiV1login.go @@ -69,7 +69,9 @@ func apiV1Login(w http.ResponseWriter, r *http.Request, ss *loan.Session) { res.add("buser", ss.User) res.add("bpass", ss.CheckSum()) res.add("mid", ss.Get("mid")) + //send out + apiV1AddTrackingCookie(w, r, ss) res.sendJson(w) } diff --git a/apiv1.go b/apiv1.go index f4528a5..b13d979 100644 --- a/apiv1.go +++ b/apiv1.go @@ -109,7 +109,6 @@ func apiV1AddTrackingCookie(w http.ResponseWriter, r *http.Request, session *loa mid := apiV1GetMachineId(r) cookie = http.Cookie{Name: "mid", Value: mid, Expires: expiration} http.SetCookie(w, &cookie) - } func apiV1InitSessionByHttpHeader(r *http.Request, ss *loan.Session) (e error) {