fix: API key incorrectly forces token revalidation

4 years ago · 1404d6343e
1 changed files with 1 additions and 1 deletions
--- a/server/core/auth.js
+++ b/server/core/auth.js
@ -122,7 +122,7 @@ module.exports = {
      }

      // Check if user / group is in revocation list
-      if (user && !mustRevalidate) {
+      if (user && !user.api && !mustRevalidate) {
        const uRevalidate = WIKI.auth.revocationList.get(`u${_.toString(user.id)}`)
        if (uRevalidate && user.iat < uRevalidate) {
          mustRevalidate = true