Merge pull request #222 from jameskopacz/jameskopacz-patch-1

fullUser fixes
2015-03-17 20:16:40 -07:00
parent 9e67ebf3c8 770d177873
commit f1e489a494
1 changed files with 2 additions and 2 deletions
--- a/app.js
+++ b/app.js
@ -198,8 +198,8 @@ app.use(helmet.contentSecurityPolicy({

 app.use(function (req, res, next) {
    // Make user object available in templates.
-    fullUser = req.user;
-    delete fullUser.password;
+    fullUser = req.user ? req.user : null;
+    if (fullUser) fullUser.password = null;
    res.locals.user = fullUser;
    next();
 });