From aa8322c3542f3601cabee641dae31e7fe2bbed23 Mon Sep 17 00:00:00 2001
From: jamesread <contact@jread.com>
Date: Sat, 25 Oct 2025 00:20:56 +0100
Subject: [PATCH] fix: guard against nil session storage

---
 service/internal/auth/sessions.go | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/service/internal/auth/sessions.go b/service/internal/auth/sessions.go
index 043b8c8..090b59d 100644
--- a/service/internal/auth/sessions.go
+++ b/service/internal/auth/sessions.go
@@ -45,6 +45,10 @@ func RegisterUserSession(cfg *config.Config, provider string, sid string, userna
 		}
 	}
 
+	if sessionStorage.Providers == nil {
+		sessionStorage.Providers = make(map[string]*SessionProvider)
+	}
+
 	sessionStorage.Providers[provider].Sessions[sid] = &UserSession{
 		Username: username,
 		Expiry:   time.Now().Unix() + 31556952, // 1 year
@@ -55,8 +59,8 @@ func RegisterUserSession(cfg *config.Config, provider string, sid string, userna
 
 // GetUserSession retrieves a user session
 func GetUserSession(provider string, sid string) *UserSession {
-	sessionStorageMutex.RLock()
-	defer sessionStorageMutex.RUnlock()
+	sessionStorageMutex.Lock()
+	defer sessionStorageMutex.Unlock()
 
 	if sessionStorage.Providers[provider] == nil {
 		return nil