From 5ea63fb60be0c508c38ba228cc8ac6dd7b403aac Mon Sep 17 00:00:00 2001
From: Elias Schneider <login@eliasschneider.com>
Date: Tue, 6 Dec 2022 10:54:17 +0100
Subject: [PATCH] fix: use session storage for share token

---
 frontend/src/services/share.service.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/frontend/src/services/share.service.ts b/frontend/src/services/share.service.ts
index b332dbe..5c2d124 100644
--- a/frontend/src/services/share.service.ts
+++ b/frontend/src/services/share.service.ts
@@ -21,7 +21,7 @@ const completeShare = async (id: string) => {
 };
 
 const get = async (id: string): Promise<Share> => {
-  const shareToken = localStorage.getItem(`share_${id}_token`);
+  const shareToken = sessionStorage.getItem(`share_${id}_token`);
   return (
     await api.get(`shares/${id}`, {
       headers: { "X-Share-Token": shareToken ?? "" },
@@ -30,7 +30,7 @@ const get = async (id: string): Promise<Share> => {
 };
 
 const getMetaData = async (id: string): Promise<ShareMetaData> => {
-  const shareToken = localStorage.getItem(`share_${id}_token`);
+  const shareToken = sessionStorage.getItem(`share_${id}_token`);
   return (
     await api.get(`shares/${id}/metaData`, {
       headers: { "X-Share-Token": shareToken ?? "" },
@@ -49,7 +49,7 @@ const getMyShares = async (): Promise<MyShare[]> => {
 const getShareToken = async (id: string, password?: string) => {
   const { token } = (await api.post(`/shares/${id}/token`, { password })).data;
 
-  localStorage.setItem(`share_${id}_token`, token);
+  sessionStorage.setItem(`share_${id}_token`, token);
 };
 
 const isShareIdAvailable = async (id: string): Promise<boolean> => {
@@ -57,7 +57,7 @@ const isShareIdAvailable = async (id: string): Promise<boolean> => {
 };
 
 const getFileDownloadUrl = async (shareId: string, fileId: string) => {
-  const shareToken = localStorage.getItem(`share_${shareId}_token`);
+  const shareToken = sessionStorage.getItem(`share_${shareId}_token`);
   return (
     await api.get(`shares/${shareId}/files/${fileId}/download`, {
       headers: { "X-Share-Token": shareToken ?? "" },