node.js - Node Express Session revocation on re-issue? -


using node v12, express 4, , connect-pg-simple

during our security evaluation discovered if user logs in successfully, , logs in again successfully, prior session remains valid.

i'd second login revoke first session. failure means user can logged-in in 2 different browsers.


Comments

Popular posts from this blog

powershell Start-Process exit code -1073741502 when used with Credential from a windows service environment -

twig - Using Twigbridge in a Laravel 5.1 Package -

c# - LINQ join Entities from HashSet's, Join vs Dictionary vs HashSet performance -