From 8e04f957735d378c0d9b6b54d52b4d75dbd69b0b Mon Sep 17 00:00:00 2001 From: Wang Qi Date: Tue, 11 Aug 2026 17:00:57 +0800 Subject: [PATCH] Fix to force logout user when set user as inactive (#893) (#18104) --- admin/server/services.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/admin/server/services.py b/admin/server/services.py index 748ebe1cc6..a59c921c3b 100644 --- a/admin/server/services.py +++ b/admin/server/services.py @@ -18,6 +18,7 @@ import json import os import logging import re +import secrets from typing import Any from werkzeug.security import check_password_hash @@ -146,7 +147,10 @@ class UserMgr: if target_status == usr.is_active: return f"User activate status is already {_activate_status}!" # update is_active - UserService.update_user(usr.id, {"is_active": target_status}) + update_dict = {"is_active": target_status} + if target_status == ActiveEnum.INACTIVE.value: + update_dict["access_token"] = f"INVALID_{secrets.token_hex(16)}" + UserService.update_user(usr.id, update_dict) return f"Turn {_activate_status} user activate status successfully!" @staticmethod