From ab043d8617692f6a6fe20d8ecc747192d52c7fb1 Mon Sep 17 00:00:00 2001 From: Julien Dessaux Date: Wed, 29 Jan 2025 00:22:12 +0100 Subject: fix(webui): fix invalid session cookie handling --- pkg/webui/sessions.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'pkg/webui') diff --git a/pkg/webui/sessions.go b/pkg/webui/sessions.go index 2d99871..7a2fd02 100644 --- a/pkg/webui/sessions.go +++ b/pkg/webui/sessions.go @@ -29,7 +29,9 @@ func sessionsMiddleware(db *database.DB) func(http.Handler) http.Handler { errorResponse(w, http.StatusInternalServerError, err) return } - if !session.IsExpired() { + if session == nil { + unsetSesssionCookie(w) + } else if !session.IsExpired() { if err := db.TouchSession(cookie.Value); err != nil { errorResponse(w, http.StatusInternalServerError, err) return -- cgit v1.2.3