diff src/ur/openidUser.ur @ 18:dd8eb53da51b

Pretend user isn't logged in when he gives bogus session data; add some documentation to openidUser.urs
author Adam Chlipala <adam@chlipala.net>
date Thu, 06 Jan 2011 15:17:15 -0500
parents df2eb629f21a
children 2342d9baa0df
line wrap: on
line diff
--- a/src/ur/openidUser.ur	Thu Jan 06 14:42:37 2011 -0500
+++ b/src/ur/openidUser.ur	Thu Jan 06 15:17:15 2011 -0500
@@ -54,7 +54,7 @@
                                     WHERE session.Id = {[login.Session]}
                                       AND session.Key = {[login.Key]});
             case ident of
-                None => error <xml>Invalid or expired session</xml>
+                None => return None
               | Some None => return None
               | Some (Some ident) =>
                 valid <- oneRowE1 (SELECT COUNT( * ) > 0