fix bug when user not found on signing in and captcha conditions met

rubygems · Mar 17, 2023 · e7b8f9f · e7b8f9f
1 parent abc517f
commit e7b8f9f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb
@@ -12,7 +12,7 @@ class SessionsController < Clearance::SessionsController
 
   def create
     @user = find_user
-    if !valid_privacy_pass_redemption? && HcaptchaVerifier.should_verify_sign_in?(who)
+    if @user && !valid_privacy_pass_redemption? && HcaptchaVerifier.should_verify_sign_in?(who)
       setup_captcha_verification
       render "sessions/captcha"
     elsif @user && (@user.mfa_enabled? || @user.webauthn_credentials.any?)