fix totp infinite loop on back to /login

bunkerity · May 22, 2024 · caaa62b · caaa62b
1 parent e99937f
commit caaa62b
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/ui/main.py b/src/ui/main.py
@@ -470,7 +470,9 @@ def before_request():
  and not request.path.startswith(("/css", "/images", "/js", "/json", "/webfonts"))
  and request.path.endswith("/login")
  ):
- return redirect(url_for("login", next=request.path))
+ logout_user()
+ session.clear()
+ return redirect(url_for("login"))
 
  # Case not login page, keep on 2FA before any other access
  if (