Refresh site on logout to avoid CSRF issues

2020-05-19 12:02:58 +02:00 · 2020-05-19 12:02:58 +02:00 · 79753d7752
parent f4e9037f95
commit 79753d7752
1 changed files with 4 additions and 1 deletions
--- a/front/src/store/auth.js
+++ b/front/src/store/auth.js
@ -168,7 +168,10 @@ export default {
        commit(`${m}/reset`, null, {root: true})
      })
      logger.default.info('Log out, goodbye!')
-      router.push({name: 'index'})
+      await router.push({name: 'index'}, () => {
+        // refresh to get a new CSRF token
+        window.location.reload(true)
+      })
    },
    async check ({commit, dispatch, state}) {
      logger.default.info('Checking authentication…')