🐛 Properly send 403 on not authorized request.

2026-02-25 22:04:14 +00:00 · 2019-12-20 22:54:58 +01:00
parent dabbbc2e09
commit fee2eea87c
1 changed files with 1 additions and 1 deletions
--- a/backend/src/uxbox/http/session.clj
+++ b/backend/src/uxbox/http/session.clj
@@ -56,7 +56,7 @@
                               (spx/terminate (assoc data ::unauthorized true)))))
                  (vc/handle-on-context))))
   :leave (fn [data]
-            (if (and (::unauthorized data) (:response data))
+            (if (::unauthorized data)
              (update data :response
                      assoc :status 403 :body {:type :authentication
                                               :code :unauthorized})