changeset 12746 | 126aefd2c4c6 |
parent 12666 | 07424992d7fc |
child 12747 | 19113f232423 |
--- a/plugins/mod_tokenauth.lua Thu Oct 06 11:12:57 2022 +0100 +++ b/plugins/mod_tokenauth.lua Thu Oct 06 15:59:07 2022 +0100 @@ -68,6 +68,12 @@ return nil, "not-authorized"; end + local account_info = usermanager.get_account_info(token_user, module.host); + local password_updated_at = account_info and account_info.password_updated; + if password_updated_at and password_updated_at > token_info.created then + return nil, "not-authorized"; + end + return token_info end