maxjustus / sinatra-authentication

A sinatra extension wrapped in a gem that implements authentication/permissions with users stored in the database. Now with optional support for facebook connect
The Unlicense
476 stars 94 forks source link

Stricter check with login_required. #54

Closed jesper closed 11 years ago

jesper commented 11 years ago

A user deleted from a database will otherwise pass the login_required check, as it's "nil" and not a "GuestUser". (pending that the user already has their cookie and can pass the session check)

WA9ACE commented 11 years ago

Nice catch.