# HG changeset patch
# User bsw
# Date 1603904230 -3600
# Node ID e670b2c341e65f0ca298b26a3c98a85f6ef06e8e
# Parent  408e4b1d5234fcc92ce0fd33c523c333cdd80757
Do not create new session for cors requests

diff -r 408e4b1d5234 -r e670b2c341e6 app/main/_filter/20_session.lua
--- a/app/main/_filter/20_session.lua	Mon Oct 26 11:06:53 2020 +0100
+++ b/app/main/_filter/20_session.lua	Wed Oct 28 17:57:10 2020 +0100
@@ -51,7 +51,7 @@
 
 if not app.session then
   app.session = Session:new()
-  if need_session then
+  if need_session and not cors_request then
     app.session:set_cookie()
   end
 end