Merge pull request #16884 from marcusmoore/bug/sc-29097

snipe · web-flow · commit 352b935dee6e · 2025-05-08T06:23:26.000+01:00
Removed `2fa_authed` from session upon logout
diff --git a/app/Http/Controllers/Auth/LoginController.php b/app/Http/Controllers/Auth/LoginController.php
@@ -484,6 +484,7 @@ public function logout(Request $request)
         }
 
         $request->session()->regenerate(true);
+        $request->session()->forget('2fa_authed');
 
         if ($request->session()->has('password_hash_'.Auth::getDefaultDriver())){
             $request->session()->remove('password_hash_'.Auth::getDefaultDriver());

Original file line number	Diff line number	Diff line change
`@@ -484,6 +484,7 @@ public function logout(Request $request)`
`484`	`484`	`}`
`485`	`485`
`486`	`486`	`$request->session()->regenerate(true);`
	`487`	`+ $request->session()->forget('2fa_authed');`
`487`	`488`
`488`	`489`	`if ($request->session()->has('password_hash_'.Auth::getDefaultDriver())){`
`489`	`490`	`$request->session()->remove('password_hash_'.Auth::getDefaultDriver());`