refactor: remove recovery auth surface

2026-04-19 19:40:18 +02:00
parent 4eaa6542ff
commit 1e1a3e8205
11 changed files with 70 additions and 291 deletions
--- a/internal/shared/middleware/auth.go
+++ b/internal/shared/middleware/auth.go
@@ -28,8 +28,6 @@ func Auth(authService *auth.Service) func(http.Handler) http.Handler {
 			user, err := authService.ValidateSession(r.Context(), cookie.Value)
 			if err != nil {
 				// Invalid session, proceed as unauthenticated
-				// Might also want to clear the invalid cookie here
-				auth.ClearSessionCookie(w)
 				next.ServeHTTP(w, r)
 				return
 			}