Ensure user cookie can be unencoded

holoviz · Jun 25, 2024 · d406381 · d406381
1 parent 4e351ed
commit d406381
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/panel/io/application.py b/panel/io/application.py
@@ -100,7 +100,10 @@ def process_request(self, request) -> dict[str, Any]:
         user = request.cookies.get('user')
         if user:
             from tornado.web import decode_signed_value
-            user = decode_signed_value(config.cookie_secret, 'user', user.value).decode('utf-8')
+            try:
+                user = decode_signed_value(config.cookie_secret, 'user', user.value).decode('utf-8')
+            except Exception:
+                user = user.value
             if user in state._oauth_user_overrides:
                 user_data = json.dumps(state._oauth_user_overrides[user])
                 if state.encryption: