Skip to content
Snippets Groups Projects
Commit 8d6c3cd4 authored by Eugen Rochko's avatar Eugen Rochko Committed by GitHub
Browse files

Fix sessions being replaced needlessly (#4292)

parent 38177048
No related branches found
No related tags found
No related merge requests found
Warden::Manager.after_set_user except: :fetch do |user, warden|
SessionActivation.deactivate warden.cookies.signed['_session_id']
if user.session_active?(warden.cookies.signed['_session_id'] || warden.raw_session['auth_id'])
session_id = warden.cookies.signed['_session_id'] || warden.raw_session['auth_id']
else
session_id = user.activate_session(warden.request)
end
warden.cookies.signed['_session_id'] = {
value: user.activate_session(warden.request),
value: session_id,
expires: 1.year.from_now,
httponly: true,
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment