Update: 2026-05-03 20:45:16
This commit is contained in:
@@ -14,7 +14,7 @@ if (!$refreshToken) {
|
||||
}
|
||||
|
||||
$db = Database::getInstance();
|
||||
$stmt = $db->prepare("SELECT * FROM users WHERE refresh_token = ? LIMIT 1");
|
||||
$stmt = $db->prepare("SELECT * FROM users WHERE refresh_token_hash = ? LIMIT 1");
|
||||
$stmt->execute([$refreshToken]);
|
||||
$user = $stmt->fetch();
|
||||
|
||||
@@ -32,7 +32,7 @@ $payload = [
|
||||
$newToken = JWT::encode($payload, $secret);
|
||||
$newRefreshToken = bin2hex(random_bytes(32));
|
||||
|
||||
$stmt = $db->prepare("UPDATE users SET refresh_token = ? WHERE id = ?");
|
||||
$stmt = $db->prepare("UPDATE users SET refresh_token_hash = ? WHERE id = ?");
|
||||
$stmt->execute([$newRefreshToken, $user['id']]);
|
||||
|
||||
json_success([
|
||||
|
||||
Reference in New Issue
Block a user