get以外ではreturn_toはできないので認証情報の更新処理から除外

ynlab · Mar 2, 2018 · accf146 · accf146 · okbp · Mar 4, 2018
1 parent a0ccf3e
commit accf146
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/tauth/controller_methods.rb b/lib/tauth/controller_methods.rb
@@ -44,6 +44,7 @@ def authenticate!
 
     def refresh_current_user
       return if (last_fetch = cookies.signed[:tauth_last_fetch] and last_fetch > Tauth.config.expires_in.ago)
+      return if request.request_method.upcase != "GET"
 
       refresh_current_user!
     end