From 8450390fcce5f7dc3f11c43a14f1d76dbb949a0d Mon Sep 17 00:00:00 2001
From: Baoshuo <i@baoshuo.ren>
Date: Sat, 6 Jun 2026 17:13:09 +0800
Subject: [PATCH] core: delete old session after recreate

---
 packages/hydrooj/src/service/layers/base.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/hydrooj/src/service/layers/base.ts b/packages/hydrooj/src/service/layers/base.ts
index 7cbd44aa8..6f13f03bf 100644
--- a/packages/hydrooj/src/service/layers/base.ts
+++ b/packages/hydrooj/src/service/layers/base.ts
@@ -57,6 +57,7 @@ export default async (ctx: KoaContext, next: Next) => {
     if (ctx.session._id && !ctx.session.recreate) {
         await token.update(ctx.session._id, token.TYPE_SESSION, expireSeconds, omit(ctx.session, ['_id', 'recreate']));
     } else {
+        if (ctx.session._id) await token.del(ctx.session._id, token.TYPE_SESSION);
         Object.assign(ctx.session, { createIp: request.ip, createUa: ua, createHost: request.host });
         [ctx.session._id] = await token.add(token.TYPE_SESSION, expireSeconds, omit(ctx.session, ['_id', 'recreate']));
     }