Reset tokens on login error (#810)

also clear csrf token and cookies. Closes #442. * Remove version changes --------- Co-authored-by: Lauren Haaitsma <[email protected]> Co-authored-by: Antonin Delpeuch <[email protected]>
Wikidata · Jan 16, 2024 · 4f78f81 · 4f78f81
1 parent 38ce89a
commit 4f78f81
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/wdtk-wikibaseapi/src/main/java/org/wikidata/wdtk/wikibaseapi/BasicApiConnection.java b/wdtk-wikibaseapi/src/main/java/org/wikidata/wdtk/wikibaseapi/BasicApiConnection.java
@@ -184,6 +184,8 @@ protected void login(String username, String password, ILogin loginFunction) thr
 				loginFunction.login(token, username, password);
 			} catch (NeedLoginTokenException | TokenErrorException e) { // try once more
 				clearToken("login");
+				clearToken("csrf");
+				clearCookies();
 				token = getOrFetchToken("login");
 				loginFunction.login(token, username, password);
 			}