Show logout link if they are logged in AND have ds_actor cookie

Otherwise an expired cookie will still cause the logout link to show.
simonw · Oct 30, 2020 · 561c1d2 · 561c1d2
1 parent 18a64fb
commit 561c1d2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/datasette/app.py b/datasette/app.py
@@ -767,7 +767,7 @@ async def menu_links():
                 "actor": request.actor if request else None,
                 "menu_links": menu_links,
                 "display_actor": display_actor,
-                "show_logout": request is not None and "ds_actor" in request.cookies,
+                "show_logout": request is not None and "ds_actor" in request.cookies and request.actor,
                 "app_css_hash": self.app_css_hash(),
                 "zip": zip,
                 "body_scripts": body_scripts,