fix: persistent sessiebeheer (remember-me), HTTPS-cookie herstel en Microsoft OAuth signed state flow

2026-09-08 15:28:57 +02:00
parent e1f50740aa
commit acef94536d
12 changed files with 278 additions and 29 deletions
@@ -81,6 +81,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            $_SESSION['user_email'] = $invite['email'];
            $_SESSION['user_role'] = $invite['role'];
            $_SESSION['is_2fa_verified'] = true;
+            issue_remember_token($newUserId);
            unset($_SESSION['invite_totp_secret']);

            header('Location: /planner.php');