feat(authenticate): Delete requests for expired cookies

1 files changed, 8 insertions, 0 deletions

diff --git a/views/user/authenticate.php b/views/user/authenticate.php
index e4cf47e..ba0dd30 100644
--- a/views/user/authenticate.php
+++ b/views/user/authenticate.php
@@ -9,6 +9,14 @@ if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
 }
 
 try {
+    $token = Database\Cookie::fromDBtoken($TOKEN);
+    if (strtotime($token->Expires) < strtotime('now')) {
+        $token->delete();
+
+        http_response_code(410);
+        header('Content-Type: text/plain');
+        exit;
+    }
     $user = Database\Cookie::fromDB($TOKEN);
 
     http_response_code(200);