mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-30 14:22:07 +03:00
0e1ae7c2af
- The existing createSessionFromToken was actually doing two things behind the scenes 1. Handling the ?token from the magic link and creating an actual session (mounted globally, which is not necessary) 2. Loading an existing session so that a member is logged in to the frontent - IMO 1. is part of members, and doesn't need to be global - IMO 2. is part of the frontend. It does need to be global but should NOT be hidden away behind the token middleware, as it wasn't clear what this was doing |
||
---|---|---|
.. | ||
middleware | ||
app.js | ||
index.js | ||
routes.js |