user-management
user-management copied to clipboard
GhostNav menu visible issue
I caught problem with displaying secure links(routes) in main nav menu when session is expired (window were not closed). I was redirected to the main page (as should be) but menus are visible (as should not be).
Digging deeper, I tracked code and recognized that there is neither checking isGuest no checking of session expired (thats why Route::isRouteAllowed($baseRoute, Yii::$app->session->get(AuthHelper::SESSION_PREFIX_ROUTES,[])); return true).