Richard Hansen 250e932f59 webaccess: Enforce creation of req.session.user by authn plugins ... The authorization logic determines whether the user has already successfully authenticated by looking to see if `req.session.user` exists. If an authentication plugin says that it successfully authenticated the user but it did not create `req.session.user` then authentication will re-run for every access, and authorization plugins will be unable to determine whether the user has been authenticated. Return a 500 internal server error to prevent these problems.		2020-09-15 19:26:14 +01:00
..
express	webaccess: Enforce creation of req.session.user by authn plugins	2020-09-15 19:26:14 +01:00
express.js	express: document the effect of settings.trustProxy	2020-04-14 01:10:19 +02:00
i18n.js	i18n: Improve error logging when language JSON read fails	2020-09-15 15:32:43 +01:00