From b7597e1335f262e47d628764149cb20bdbd4ad9e Mon Sep 17 00:00:00 2001
From: Niko Marmeladkov <niko@n1kt.ru>
Date: Wed, 1 Jul 2026 14:51:52 +0300
Subject: [PATCH] handleAuthCert: unregister old number before changing
 identity

If session already has a different number (e.g. from PoW), unregister it before re-auth to prevent stale entries in sessions map.
---
 internal/server/server.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/internal/server/server.go b/internal/server/server.go
index 8bbcf85..e5bfb26 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -350,6 +350,10 @@ func (s *Server) handleAuthCert(sess *Session, payload []byte) {
 		return
 	}
 
+	if sess.IsAuthenticated() && sess.Number() != ident.Number {
+		s.Unregister(sess.Number())
+	}
+
 	sess.Authenticate(ident.Number, pubKey, certDER)
 	s.Register(sess, ident.Number)