Regenerate session ID on logout

Signed-off-by: snipe <snipe@snipe.net>
2020-05-12 10:38:00 -07:00
parent 730632e2eb
commit 274f82893f
1 changed files with 2 additions and 2 deletions
@@ -382,8 +382,8 @@ class LoginController extends Controller
        if (!empty($sloRequestUrl)) {
            return redirect()->away($sloRequestUrl);
        }
-    
-        $request->session()->forget('2fa_authed');
+
+        $request->session()->regenerate(true);

        Auth::logout();