From 747f3cd300940a1ed6f9a262597b6b8c7d57c428 Mon Sep 17 00:00:00 2001 From: Marcus Efraimsson Date: Mon, 19 Apr 2021 19:46:25 +0200 Subject: [PATCH] Auth: Don't clear auth token cookie when lookup token fails (#32999) If LookupToken fails we don't clear the auth token cookie. Ref #15316 --- pkg/services/contexthandler/contexthandler.go | 6 ------ 1 file changed, 6 deletions(-) diff --git a/pkg/services/contexthandler/contexthandler.go b/pkg/services/contexthandler/contexthandler.go index b226eb9b6f7..f858df42c1a 100644 --- a/pkg/services/contexthandler/contexthandler.go +++ b/pkg/services/contexthandler/contexthandler.go @@ -259,12 +259,6 @@ func (h *ContextHandler) initContextWithToken(ctx *models.ReqContext, orgID int6 token, err := h.AuthTokenService.LookupToken(ctx.Req.Context(), rawToken) if err != nil { ctx.Logger.Error("Failed to look up user based on cookie", "error", err) - - var revokedErr *models.TokenRevokedError - if !errors.As(err, &revokedErr) || !ctx.IsApiRequest() { - cookies.WriteSessionCookie(ctx, h.Cfg, "", -1) - } - ctx.Data["lookupTokenErr"] = err return false }