Merge pull request #6726 from opf/fix/28579/reset-session-before-login

[28579] Ensure resetting the session before forwarding to login
6 years ago · bcc006ec29
parent a4167d98cb b9c065505a
commit bcc006ec29
1 changed files with 4 additions and 0 deletions
--- a/app/controllers/application_controller.rb
+++ b/app/controllers/application_controller.rb
@ -245,6 +245,10 @@ class ApplicationController < ActionController::Base

  def require_login
    unless User.current.logged?
+
+      # Ensure we reset the session to terminate any old session objects
+      reset_session
+
      respond_to do |format|
        format.any(:html, :atom) do redirect_to signin_path(back_url: login_back_url) end