api: fix login from cookie

Victor Costa
1 parent 54a1e6d4
Showing 1 changed file with 1 additions and 0 deletions Show diff stats
lib/noosfero/api/session.rb
@@ -45,6 +45,7 @@ module Noosfero
       end
  
       post "/login_from_cookie" do
+        return unauthorized! if cookies[:auth_token].blank?
         user = User.where(remember_token: cookies[:auth_token]).first
         return unauthorized! unless user && user.activated?
         @current_user = user
...	...	@@ -45,6 +45,7 @@ module Noosfero
45	45	end
46	46
47	47	post "/login_from_cookie" do
	48	+ return unauthorized! if cookies[:auth_token].blank?
48	49	user = User.where(remember_token: cookies[:auth_token]).first
49	50	return unauthorized! unless user && user.activated?
50	51	@current_user = user
...	...