CluPilotCloud/app/Http
nexxo 055c6228f4 Stop a suspended customer's sign-out from killing a shared operator session
EnsureCustomerActive used session()->invalidate() to sign a suspended
or closed customer out. In shared-host mode the console and the
portal keep their login key in one session, so invalidate() (flush()
+ migrate(true)) silently signed out an operator elsewhere in that
same browser too. Same fix as the console's own /logout route:
regenerate() gets a fresh session id without flushing attributes
belonging to another guard.
2026-07-28 15:02:00 +02:00
..
Controllers Refuse a portal login for an address that already belongs to an operator 2026-07-28 14:42:16 +02:00
Middleware Stop a suspended customer's sign-out from killing a shared operator session 2026-07-28 15:02:00 +02:00