diff --git a/lib/barong/authorize.rb b/lib/barong/authorize.rb index ab26a8083..98e522e75 100644 --- a/lib/barong/authorize.rb +++ b/lib/barong/authorize.rb @@ -57,15 +57,15 @@ def validate_session! Time.now.to_i < session[:expire_time] && find_ip.include?(remote_ip) + Rails.logger.debug("Session mismatch! Valid session is: { agent: #{session[:user_agent]}," \ + " expire_time: #{session[:expire_time]}, ip: #{session[:user_ip]} }," \ + " but request contains: { agent: #{@request.env['HTTP_USER_AGENT']}, ip: #{remote_ip} }") + # Delete session from additional redis list Barong::RedisSession.delete(session[:uid], session.id.to_s) session.destroy - Rails.logger.debug("Session mismatch! Valid session is: { agent: #{session[:user_agent]}," \ - " expire_time: #{session[:expire_time]}, ip: #{session[:user_ip]} }," \ - " but request contains: { agent: #{@request.env['HTTP_USER_AGENT']}, ip: #{remote_ip} }") - error!({ errors: ['authz.client_session_mismatch'] }, 401) end