Enhance session management and user authentication flow; implement day session tokens, improve cookie handling, and streamline date handling in planner

2026-09-09 19:18:42 +02:00
parent 2062fd065a
commit 963342f858
5 changed files with 146 additions and 89 deletions
@@ -112,9 +112,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                $_SESSION['is_2fa_verified'] = true;
                $_SESSION['auth_date'] = date('Y-m-d');
                $_SESSION['session_expires_at'] = strtotime('today 23:59:59');
+                $_SESSION['last_activity'] = time();

-                // Zorg dat er geen persistente remember cookies worden gebruikt
-                clear_remember_cookie();
+                // Dagsessie-token uitgeven (strikt geldig tot 23:59:59 van vandaag)
+                issue_day_session_token((int)$user['id']);

                unset($_SESSION['pending_2fa_user_id'], $_SESSION['pending_2fa_user_email'], $_SESSION['pending_2fa_user_name']);