fix refresh_session does not validate expiry before refreshing (#1071)

This commit is contained in:
Harisreedhar authored and henryruhs committed 2026-05-11 16:36:23 +02:00
1 parent e15a2dec76
commit df38778558
2 files changed
+24 -1

No files matched your search

+1 -1
View File
@@ -48,7 +48,7 @@ async def refresh_session(request : Request) -> JSONResponse:
body = await request.json()
for session_id, session in session_manager.SESSIONS.items():
if session.get('refresh_token') == body.get('refresh_token'):
if session.get('refresh_token') == body.get('refresh_token') and session_manager.validate_session(session_id):
__session__ = session_manager.create_session()
session_manager.set_session(session_id, __session__)