Clear authenticated session if unable to read cookie (#764)

stashapp · Feb 27, 2024 · 61e8dcb · 61e8dcb
1 parent f9bead0
commit 61e8dcb
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/api/session.go b/pkg/api/session.go
@@ -80,7 +80,11 @@ func handleLogout(w http.ResponseWriter, r *http.Request) {
 func getSessionUserID(w http.ResponseWriter, r *http.Request) (string, error) {
 	session, err := sessionStore.Get(r, cookieName)
 	if err != nil {
-		return "", err
+		session.Options.MaxAge = -1
+		if err = session.Save(r, w); err != nil {
+			http.Error(w, err.Error(), http.StatusInternalServerError)
+		}
+		return "", nil
 	}
 
 	if !session.IsNew {