Update AuthManager.php

Signed-off-by: Zoey <zoey@z0ey.de>
2026-09-20 02:00:23 +00:00 · 2026-08-19 21:34:18 +02:00
parent 2c978e9556
commit bf297e25f6
1 changed files with 1 additions and 6 deletions
@@ -44,12 +44,7 @@ readonly class AuthManager {
        }

        // Prevent token replay: reject tokens that have already been used
-        $tokenHash = hash('sha256', $token);
-        $cacheKey = 'used_token_' . $tokenHash;
-        if (apcu_fetch($cacheKey) !== false) {
-            return false;
-        }
-        apcu_add($cacheKey, true, 60);
+        if (!apcu_add('used_token_' . hash('sha256', $token), true, 60)) return false;

        return true;
    }