From 52a1f18c60f087cf6a174804cc957ed6418fe4c4 Mon Sep 17 00:00:00 2001
From: Derrick Hammer <derrick@derrickhammer.com>
Date: Wed, 20 Mar 2024 14:41:54 -0400
Subject: [PATCH] fix: if claim is empty and ExpiredAllowed on, abort early and
 pass through

---
 api/middleware/middleware.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/api/middleware/middleware.go b/api/middleware/middleware.go
index 569f4cb..96a161d 100644
--- a/api/middleware/middleware.go
+++ b/api/middleware/middleware.go
@@ -176,6 +176,11 @@ func AuthMiddleware(options AuthMiddlewareOptions) func(http.Handler) http.Handl
 				}
 			}
 
+			if claim == nil && options.ExpiredAllowed {
+				next.ServeHTTP(w, r)
+				return
+			}
+
 			userId, err := strconv.ParseUint(claim.Subject, 10, 64)
 
 			if err != nil {