fix(api): add session_id validation for webapp JWT authentication (#28297)

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-11-21 11:23:52 +08:00
parent 3cf19dc07f
commit a4c4d18f42
4 changed files with 13 additions and 5 deletions
--- a/web/app/(shareLayout)/components/splash.tsx
+++ b/web/app/(shareLayout)/components/splash.tsx
@@ -58,7 +58,7 @@ const Splash: FC<PropsWithChildren> = ({ children }) => {

    (async () => {
      // if access mode is public, user login is always true, but the app login(passport) may be expired
-      const { userLoggedIn, appLoggedIn } = await webAppLoginStatus(shareCode!)
+      const { userLoggedIn, appLoggedIn } = await webAppLoginStatus(shareCode!, embeddedUserId || undefined)
      if (userLoggedIn && appLoggedIn) {
        redirectOrFinish()
      }