From 6cf267d368140159329bdaec965aa7bfc1f3433f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Anderson=20Val=C3=A9rio?= Date: Fri, 27 Dec 2024 08:38:23 -0300 Subject: [PATCH] clear session when refresh token fail to generate a new acess token --- pkg/middleware/stored_session.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/middleware/stored_session.go b/pkg/middleware/stored_session.go index f861c756..3d0bdacf 100644 --- a/pkg/middleware/stored_session.go +++ b/pkg/middleware/stored_session.go @@ -191,6 +191,7 @@ func (s *storedSessionLoader) refreshSessionIfNeeded(rw http.ResponseWriter, req // If a preemptive refresh fails, we still keep the session // if validateSession succeeds. logger.Errorf("Unable to refresh session: %v", err) + return fmt.Errorf("unable to refresh session: %v", err) } // Validate all sessions after any Redeem/Refresh operation (fail or success)