fix(auth): 登出時強制清除 Session Cookie 以解決二次登入問題
This commit is contained in:
@@ -7,6 +7,7 @@ use Illuminate\Http\Request;
|
|||||||
use Illuminate\Support\Facades\Auth;
|
use Illuminate\Support\Facades\Auth;
|
||||||
use Inertia\Inertia;
|
use Inertia\Inertia;
|
||||||
use Illuminate\Validation\ValidationException;
|
use Illuminate\Validation\ValidationException;
|
||||||
|
use Illuminate\Support\Facades\Cookie;
|
||||||
|
|
||||||
class LoginController extends Controller
|
class LoginController extends Controller
|
||||||
{
|
{
|
||||||
@@ -71,6 +72,10 @@ class LoginController extends Controller
|
|||||||
|
|
||||||
$request->session()->regenerateToken();
|
$request->session()->regenerateToken();
|
||||||
|
|
||||||
|
// 強制清除 Session Cookie (對付 HTTPS/Proxy 環境下的殘留問題)
|
||||||
|
$sessionCookieName = config('session.cookie');
|
||||||
|
Cookie::queue(Cookie::forget($sessionCookieName));
|
||||||
|
|
||||||
return redirect('/');
|
return redirect('/');
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user