handleAuthCert: unregister old number before changing identity

If session already has a different number (e.g. from PoW), unregister it before re-auth to prevent stale entries in sessions map.
This commit is contained in:
Niko Marmeladkov 2026-07-01 14:51:52 +03:00
parent ba79f81721
commit b7597e1335

View file

@ -350,6 +350,10 @@ func (s *Server) handleAuthCert(sess *Session, payload []byte) {
return
}
if sess.IsAuthenticated() && sess.Number() != ident.Number {
s.Unregister(sess.Number())
}
sess.Authenticate(ident.Number, pubKey, certDER)
s.Register(sess, ident.Number)