sessions - fix infinite loop when session checks fail

This commit is contained in:
florian 2023-08-04 10:06:28 +02:00
parent 784ce643f0
commit 9efd7a5a5f
No known key found for this signature in database
GPG key ID: 3D80806F12602A7C

View file

@ -486,9 +486,9 @@ utils.check_session = function(ctx)
local key = check[1]
local value = check[2]
if _session:get(key) ~= value then
_session:clear_request_cookie()
local ok, err = _session:destroy()
if not ok then
_session:close()
return false, "session:destroy() error : " .. err
end
logger:log(ngx.WARN, "session check " .. key .. " failed, destroying session")
@ -506,7 +506,6 @@ utils.check_session = function(ctx)
end
end
ctx.bw.sessions_is_checked = true
_session:close()
return true, exists
end