Handle session ID being nil in auth_callback (pupilfirst#1515)

yuanzhongqiao · Dec 18, 2023 · 7d02d7f · 7d02d7f
1 parent c92c6ac
commit 7d02d7f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/users/sessions_controller.rb b/app/controllers/users/sessions_controller.rb
@@ -145,7 +145,7 @@ def auth_callback
         session_id = Base64.urlsafe_decode64(data[:session_id])
 
         # Abort if the session is invalid
-        if session_id.to_s != session.id.private_id.to_s
+        if session.id.nil? || session_id.to_s != session.id.private_id.to_s
           flash[:error] = t(".invalid_session")
           redirect_to new_user_session_path
           return