PYIC-6245: Also check that there is no IPV Session ID

govuk-one-login · Nov 15, 2024 · 78cc9fe · 78cc9fe
1 parent d515690
commit 78cc9fe
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/app/mobile-app/middleware.ts b/src/app/mobile-app/middleware.ts
@@ -19,6 +19,7 @@ export const checkMobileAppDetails: RequestHandler = async (req, res) => {
 
   // If we don't have a clientOAuthSessionId in our session then we're dealing with a cross browser callback and core back will give us a clientOAuthSessionId to use instead.
   if (
+    !req.session.ipvSessionId &&
     !req.session.clientOauthSessionId &&
     apiResponse.data.clientOAuthSessionId
   ) {