Check for password before storing hash in session (#50507)

Fixes #50497
laravel · Mar 13, 2024 · bf8fe84 · bf8fe84
1 parent 3cc3d2a
commit bf8fe84
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Illuminate/Session/Middleware/AuthenticateSession.php b/src/Illuminate/Session/Middleware/AuthenticateSession.php
@@ -44,7 +44,7 @@ public function __construct(AuthFactory $auth)
      */
     public function handle($request, Closure $next)
     {
-        if (! $request->hasSession() || ! $request->user()) {
+        if (! $request->hasSession() || ! $request->user() || ! $request->user()->getAuthPassword()) {
             return $next($request);
         }