diff --git a/rules/Global-Function-Declarations.js b/rules/Global-Function-Declarations.js index 9bc0af7..1f247b2 100644 --- a/rules/Global-Function-Declarations.js +++ b/rules/Global-Function-Declarations.js @@ -4,7 +4,6 @@ function globalFunctionDeclaration(user, context, callback) { // with a NON RECOVERABLE error, and thus LOGIN WILL FAIL FOR USERS // Since we do not use the /continue endpoint let's make sure we explictly fail with an UnauthorizedError - // otherwise it is possible to continue the session even after a postError redirect is set. if (context.protocol === "redirect-callback") { return callback(new UnauthorizedError('The /continue endpoint is not allowed'), user, context);