fix: API key incorrectly forces token revalidation

requarks · Sep 12, 2020 · 1404d63 · 1404d63
1 parent 8f6cba2
commit 1404d63
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/core/auth.js b/server/core/auth.js
@@ -122,7 +122,7 @@ module.exports = {
       }
 
       // Check if user / group is in revocation list
-      if (user && !mustRevalidate) {
+      if (user && !user.api && !mustRevalidate) {
         const uRevalidate = WIKI.auth.revocationList.get(`u${_.toString(user.id)}`)
         if (uRevalidate && user.iat < uRevalidate) {
           mustRevalidate = true