fix: login security issue

sparcs-kaist · Mar 20, 2024 · 47ca067 · 47ca067
1 parent 94f7e44
commit 47ca067
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 5 deletions.
diff --git a/back/routes/user.js b/back/routes/user.js
@@ -75,9 +75,9 @@ router.post("/", async (req, res) => {
 });
 
 router.get("/", async (req, res) => {
-  const { student_id } = req.session.user;
-
   try {
+    const { student_id } = req.session.user;
+
     const member = await Member.findOne({
       where: { student_id },
     });

diff --git a/front/src/pages/home/Home/Home.tsx b/front/src/pages/home/Home/Home.tsx
@@ -26,15 +26,21 @@ export const Home = (): JSX.Element => {
         const loginInfo = JSON.parse(loginInfoStr);
 
         try {
-          console.log(loginInfo);
-          await postRequest("user", loginInfo, () => {});
+          await postRequest(
+            "user",
+            loginInfo,
+            () => {},
+            () => {
+              alert("로그아웃 후 KAIST 계정으로 다시 로그인해주시기 바랍니다.");
+              window.location.href = "https://sso.sparcs.org";
+            }
+          );
           await getRequest("user", (data) => {
             login(data);
           });
           navigate("/");
         } catch (error) {
           console.error(error);
-          logout();
         }
       }
     };