clear session when refresh token fail to generate a new acess token

2024-12-27 08:38:23 -03:00 · 2024-12-27 08:38:23 -03:00 · 6cf267d368
parent 2851483446
commit 6cf267d368
1 changed files with 1 additions and 0 deletions
--- a/pkg/middleware/stored_session.go
+++ b/pkg/middleware/stored_session.go
@ -191,6 +191,7 @@ func (s *storedSessionLoader) refreshSessionIfNeeded(rw http.ResponseWriter, req
 		// If a preemptive refresh fails, we still keep the session
 		// if validateSession succeeds.
 		logger.Errorf("Unable to refresh session: %v", err)
+		return fmt.Errorf("unable to refresh session: %v", err)
 	}

 	// Validate all sessions after any Redeem/Refresh operation (fail or success)