Fix invalidating auth token when device reports uninstall

2026-08-31 19:03:45 +02:00 · 2019-10-21 14:03:38 +02:00
parent 919b0e6984
commit 306bc0646f
2 changed files with 23 additions and 6 deletions
@@ -35,6 +35,8 @@ export async function reportDeviceRemoved ({ database, deviceAuthToken, websocke
    })

    if (deviceEntry) {
+      const currentAuthToken = deviceEntry.deviceAuthToken
+
      deviceEntry.didDeviceReportUninstall = true
      deviceEntry.deviceAuthToken = generateAuthToken() // invalidiate the token
      deviceEntry.save({ transaction })
@@ -51,7 +53,7 @@ export async function reportDeviceRemoved ({ database, deviceAuthToken, websocke

      // add to old devices
      await database.oldDevice.create({
-        deviceAuthToken: deviceEntry.deviceAuthToken
+        deviceAuthToken: currentAuthToken
      }, {
        transaction
      })