Merge pull request #126 from mattk42/master
Check email validity on all requests rather than only on login.
This commit is contained in:
commit
58d2b88406
@ -484,7 +484,7 @@ func (p *OauthProxy) Proxy(rw http.ResponseWriter, req *http.Request) {
|
||||
}
|
||||
}
|
||||
|
||||
if saveSession && session.Email != "" && !p.Validator(session.Email) {
|
||||
if session != nil && session.Email != "" && !p.Validator(session.Email) {
|
||||
log.Printf("%s Permission Denied: removing session %s", remoteAddr, session)
|
||||
session = nil
|
||||
saveSession = false
|
||||
|
Loading…
Reference in New Issue
Block a user