fix(auth): make change-password session revocation null-safe for Npgsql
This commit is contained in:
@@ -186,7 +186,7 @@ public class AuthService : IAuthService
|
|||||||
var otherTokens = await _db.RefreshTokens
|
var otherTokens = await _db.RefreshTokens
|
||||||
.Where(rt => rt.UserId == userId
|
.Where(rt => rt.UserId == userId
|
||||||
&& rt.RevokedAt == null
|
&& rt.RevokedAt == null
|
||||||
&& rt.TokenHash != currentHash)
|
&& (currentHash == null || rt.TokenHash != currentHash))
|
||||||
.ToListAsync();
|
.ToListAsync();
|
||||||
|
|
||||||
foreach (var token in otherTokens)
|
foreach (var token in otherTokens)
|
||||||
|
|||||||
Reference in New Issue
Block a user