SECURITY: Ensure that user has been authenticated.

This commit is contained in:
Guo Xiang Tan
2017-02-24 10:27:41 +08:00
parent 3754b038e8
commit fbe51d68a7
3 changed files with 42 additions and 1 deletions

View File

@@ -21,7 +21,10 @@ class UserAuthenticator
end
def finish
authenticator.after_create_account(@user, @session) if authenticator
if authenticator && authenticated?
authenticator.after_create_account(@user, @session)
end
@session = nil
end