1 files changed, 5 insertions(+), 0 deletions(-)

M accounts/routes.go

@@ 130,6 130,11 @@ func (s *Service) LoginAuthPOST(c echo.Context) error {
 		}
 	}
 
+	// https://github.com/alexedwards/scs#preventing-session-fixation
+	if err := gctx.Server.Session.RenewToken(c.Request().Context()); err != nil {
+		return err
+	}
+
 	auth.UserLogin(c, form.user.GetID())
 	UpdateLastLogin(c.Request().Context(), form.user)