Merge pull request #20 from sdjcw/master

fixed #16: cookieSession 中间件在 sessionToken 失效时能正确处理

Author: aisk

lib/avosExpressCookieSession/index.js

@@ -70,8 +70,14 @@
           req.AV = req.AV || {};
           if (uid && sessionToken) {
             av.Cloud.logInByIdAndSessionToken(uid, sessionToken, opts.fetchUser, function(err, user) {
-              req.AV.user = user;
-              return next(err);
+              if(err) {
+                debug('sessionToken invalid, uid: %s', uid);
+                av.User.logOut();
+                delete req.AV.user;
+              } else {
+                req.AV.user = user;
+              }
+              return next();
             });
           } else {
             av.User.logOut();