clear cookie if non-existent session.

This commit is contained in:
Miroslav Šedivý
2021-03-25 10:29:28 +01:00
parent da1d073846
commit bf6181764b
4 changed files with 13 additions and 16 deletions

View File

@ -69,10 +69,12 @@ func (api *ApiManagerCtx) Authenticate(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
session, err := api.sessions.Authenticate(r)
if err != nil {
api.sessions.CookieClearToken(w, r)
utils.HttpUnauthorized(w, err)
} else {
next.ServeHTTP(w, auth.SetSession(r, session))
return
}
next.ServeHTTP(w, auth.SetSession(r, session))
})
}

View File

@ -49,7 +49,7 @@ func (api *ApiManagerCtx) Logout(w http.ResponseWriter, r *http.Request) {
return
}
api.sessions.CookieClearToken(w)
api.sessions.CookieClearToken(w, r)
utils.HttpSuccess(w, true)
}