delete session cookie when logging out and deleting account

2025-05-28 14:39:36 +03:00
parent aa49d8e4b9
commit 8e646666d1
2 changed files with 11 additions and 4 deletions
--- a/app.lua
+++ b/app.lua
@ -17,8 +17,13 @@ app.layout = require "views.base"

 app.cookie_attributes = function (self, name, value)
  if name == config.session_name then
-    local expires = date(true):adddays(30):fmt("${http}")
-    return "Expires="..expires.."; Path=/; HttpOnly; Secure"
+    if not self.session.queue_delete then
+      local expires = date(true):adddays(30):fmt("${http}")
+      return "Expires="..expires.."; Path=/; HttpOnly; Secure"
+    else
+      local expires = date(true):addseconds(-30):fmt("${http}")
+      return "Expires="..expires.."; Path=/; HttpOnly; Secure"
+    end
  end
 end