fix: set no-store cache control on jwt renew response

requarks · May 24, 2024 · 904260f · 904260f · sprayzcs · Jun 18, 2024
1 parent 1238d61
commit 904260f
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/server/core/auth.js b/server/core/auth.js
@@ -156,6 +156,9 @@ module.exports = {
           } else {
             res.cookie('jwt', newToken.token, { expires: DateTime.utc().plus({ days: 365 }).toJSDate() })
           }
+
+          // Avoid caching this response
+          res.set('Cache-Control', 'no-store')
         } catch (errc) {
           WIKI.logger.warn(errc)
           return next()