fix: persistent sessiebeheer (remember-me), HTTPS-cookie herstel en Microsoft OAuth signed state flow

2026-09-08 15:28:57 +02:00
parent e1f50740aa
commit acef94536d
12 changed files with 278 additions and 29 deletions
@@ -68,6 +68,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            $_SESSION['user_email'] = $email;
            $_SESSION['user_role'] = 'ADMIN';
            $_SESSION['is_2fa_verified'] = true;
+            issue_remember_token($adminId);
            unset($_SESSION['setup_totp_secret']);

            $success = true;