Clear authenticated session if unable to read cookie

stashapp · Feb 27, 2024 · 392876d · 392876d
1 parent 65cf377
commit 392876d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/pkg/api/session.go b/pkg/api/session.go
@@ -80,7 +80,9 @@ func handleLogout(w http.ResponseWriter, r *http.Request) {
 func getSessionUserID(w http.ResponseWriter, r *http.Request) (string, error) {
 	session, err := sessionStore.Get(r, cookieName)
 	if err != nil {
-		return "", err
+		session.Options.MaxAge = -1
+		session.Save(r, w)
+		return "", nil
 	}
 
 	if !session.IsNew {