invoke User.find_by only if userid is instance of String

Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1748450
ManageIQ · Sep 6, 2019 · ff1d50b · ff1d50b
1 parent 4afdee6
commit ff1d50b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/channels/application_cable/connection.rb b/app/channels/application_cable/connection.rb
@@ -11,7 +11,7 @@ def connect
     def find_verified_user
       return reject_unauthorized_connection unless cookies[:ws_token]
       userid = TokenManager.new('ws').token_get_info(cookies[:ws_token], :userid)
-      if current_user = User.find_by(:userid => userid)
+      if current_user = User.find_by(:userid => userid.presence)
         current_user
       else
         reject_unauthorized_connection