# HG changeset patch
# User Matthew Wild <mwild1@gmail.com>
# Date 1701280294 0
# Node ID bbbda8819331b0da842ec8fa9365846b7d418547
# Parent  a6c8a50cdfb5df6b16597dd63059fcfa449fa8ac
mod_tokenauth: Ignore invalid grants in storage that have no id

diff -r a6c8a50cdfb5 -r bbbda8819331 plugins/mod_tokenauth.lua
--- a/plugins/mod_tokenauth.lua	Wed Nov 29 17:50:33 2023 +0000
+++ b/plugins/mod_tokenauth.lua	Wed Nov 29 17:51:34 2023 +0000
@@ -145,7 +145,7 @@
 	if type(grant) == "string" then
 		grant = token_store:get_key(username, grant);
 	end
-	if not grant or not grant.created then return nil; end
+	if not grant or not grant.created or not grant.id then return nil; end
 
 	-- Invalidate grants from before last password change
 	local account_info = usermanager.get_account_info(username, module.host);