diff --git a/src/App/src/Middleware/RememberMeMiddleware.php b/src/App/src/Middleware/RememberMeMiddleware.php index f9e29af7..4709eb52 100644 --- a/src/App/src/Middleware/RememberMeMiddleware.php +++ b/src/App/src/Middleware/RememberMeMiddleware.php @@ -74,7 +74,10 @@ public function process(ServerRequestInterface $request, RequestHandlerInterface if (!empty($rememberUser)) { $user = $rememberUser->getUser(); $deviceType = $request->getServerParams()['HTTP_USER_AGENT']; - if ($hash == $rememberUser->getRememberMeToken() && $rememberUser->getUserAgent() == $deviceType) { + if ( + $hash == $rememberUser->getRememberMeToken() && $rememberUser->getUserAgent() == $deviceType && + $rememberUser->getExpireDate() > new \DateTimeImmutable('now') + ) { $identity = new UserIdentity( $user->getUuid()->toString(), $user->getIdentity(),