mirror of
https://github.com/advplyr/audiobookshelf.git
synced 2026-07-07 09:51:37 +00:00
b37cc9e4ce
When the express-session holding the OIDC transaction is missing at /auth/openid/callback (e.g. the in-memory session store was cleared by a server restart, or the callback page was reloaded), the server returned a bare 400 "No session" white screen and the flow could not recover until the user manually cleared their cookies. Instead, destroy the stale session and clear the connect.sid cookie so the next attempt starts clean, then redirect web clients back to /login to restart the flow. Mobile/API clients (identified by the client-supplied code_verifier) still receive the 400 status they expect. |
||
|---|---|---|
| .. | ||
| auth | ||
| controllers | ||
| finders | ||
| libs | ||
| managers | ||
| migrations | ||
| models | ||
| objects | ||
| providers | ||
| routers | ||
| scanner | ||
| utils | ||
| Auth.js | ||
| Database.js | ||
| Logger.js | ||
| Server.js | ||
| SocketAuthority.js | ||
| Watcher.js | ||