From 46e511ef95bdd741571d6611a5555b9b2be1e5d2 Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Thu, 21 Jul 2022 16:10:01 -0700
Subject: [PATCH] Fixed webserver.js exception.

---
 webserver.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/webserver.js b/webserver.js
index 1369ec2e..55230857 100644
--- a/webserver.js
+++ b/webserver.js
@@ -2883,9 +2883,9 @@ module.exports.CreateWebServer = function (parent, db, args, certificates, doneF
             // Send back the login application
             // If this is a 2 factor auth request, look for a hardware key challenge.
             // Normal login 2 factor request
-            if (req.session && (req.session.loginmode == 4) && (sec.tuserid)) {
+            if (req.session && (req.session.loginmode == 4)) {
                 const sec = parent.decryptSessionData(req.session.e);
-                if (sec != null) {
+                if ((sec != null) && (typeof sec.tuserid == 'string')) {
                     const user = obj.users[sec.tuserid];
                     if (user != null) {
                         parent.debug('web', 'handleRootRequestEx: sending 2FA challenge.');