fix: dont show /register page after req.session.forceLogin is set

repro
1. try to access acp after timeout
2. you get redirected to login
3. try to load /register and you get the /register page even though you are already logged in
This commit is contained in:
Barış Soner Uşaklı
2026-02-27 00:34:33 -05:00
parent 64a072c92b
commit 0ef27187a5

View File

@@ -198,7 +198,7 @@ module.exports = function (middleware) {
});
middleware.redirectToAccountIfLoggedIn = helpers.try(async (req, res, next) => {
if (req.session.forceLogin || req.uid <= 0) {
if ((req.path === '/login' && req.session.forceLogin) || req.uid <= 0) {
return next();
}
const userslug = await user.getUserField(req.uid, 'userslug');