Handle nil values correctly in User.authenticateUser

This commit is contained in:
Patrick Gansterer 2019-11-11 11:07:52 +01:00
parent 241d504a76
commit 1d9856ff93
2 changed files with 7 additions and 1 deletions

View file

@ -203,7 +203,7 @@ class User < ApplicationRecord
def self.authenticate(login, password)
user = find_by_nick(login) || find_by_email(login)
if user && user.has_password(password)
if user && password && user.has_password(password)
user
else
nil