Skip decoding without secret

holoviz · Jun 25, 2024 · e0faa01 · e0faa01
1 parent d406381
commit e0faa01
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/panel/io/application.py b/panel/io/application.py
@@ -98,7 +98,7 @@ def process_request(self, request) -> dict[str, Any]:
         '''
         request_data = super().process_request(request)
         user = request.cookies.get('user')
-        if user:
+        if user and config.cookie_secret:
             from tornado.web import decode_signed_value
             try:
                 user = decode_signed_value(config.cookie_secret, 'user', user.value).decode('utf-8')