diff --git a/Femto.Api/Auth/SessionAuthenticationHandler.cs b/Femto.Api/Auth/SessionAuthenticationHandler.cs index aa549d9..f98ae8d 100644 --- a/Femto.Api/Auth/SessionAuthenticationHandler.cs +++ b/Femto.Api/Auth/SessionAuthenticationHandler.cs @@ -45,11 +45,9 @@ internal class SessionAuthenticationHandler( var user = await authService.GetUserWithId(session.UserId); - if (user is null) + if (user is null) { - await authService.DeleteSession(sessionId); - this.Context.DeleteSession(); - return AuthenticateResult.Fail("invalid session"); + return await FailAndDeleteSession(sessionId); } if (session.ExpiresSoon)