🐛 Not update cookies when is a batch request

lynndylanhurley · Apr 7, 2023 · cbe90cd · cbe90cd
1 parent 2f664ef
commit cbe90cd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app/controllers/devise_token_auth/concerns/set_user_by_token.rb b/app/controllers/devise_token_auth/concerns/set_user_by_token.rb
@@ -154,8 +154,8 @@ def refresh_headers
       # update the response header
       response.headers.merge!(_auth_header_from_batch_request)
 
-      # set a server cookie if configured
-      if DeviseTokenAuth.cookie_enabled
+      # set a server cookie if configured and is not a batch request
+      if DeviseTokenAuth.cookie_enabled && !@is_batch_request
         set_cookie(_auth_header_from_batch_request)
       end
     end # end lock