Fixed server crash in login request.
Ylian Saint-Hilaire committed
Apr 21, 2020 at 11:13 UTC
293ac7673637b289295ceeffa38bbba57e25d780
1 file changed
+1
-1
webserver.js
+1
-1
@@ -1933,7 +1933,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates) {
1933
if (hardwareKeyChallenge) { hwstate = obj.parent.encodeCookie({ u: req.session.tokenusername, p: req.session.tokenpassword, c: req.session.u2fchallenge }, obj.parent.loginCookieEncryptionKey) }
1934
1935
// Check if we can use OTP tokens with email
1936
- var otpemail = (parent.mailserver != null) && (req.session.tokenemail);
1936
+ var otpemail = (parent.mailserver != null) && (req.session != null) && (req.session.tokenemail != null);
1937
if ((typeof domain.passwordrequirements == 'object') && (domain.passwordrequirements.email2factor == false)) { otpemail = false; }
1938
1939
// Render the login page