lib/rodauth/features/reset_password.rb in rodauth-2.32.0 vs lib/rodauth/features/reset_password.rb in rodauth-2.33.0

@@ -107,17 +107,15 @@
         if key = param_or_nil(reset_password_key_param)
           set_session_value(reset_password_session_key, key)
           redirect(r.path)
         end
 
-        if key = session[reset_password_session_key]
-          if account_from_reset_password_key(key)
-            reset_password_view
-          else
-            remove_session_value(reset_password_session_key)
-            set_redirect_error_flash no_matching_reset_password_key_error_flash
-            redirect require_login_redirect
-          end
+        if (key = session[reset_password_session_key]) && account_from_reset_password_key(key)
+          reset_password_view
+        else
+          remove_session_value(reset_password_session_key)
+          set_redirect_error_flash no_matching_reset_password_key_error_flash
+          redirect require_login_redirect
         end
       end
 
       r.post do
         key = session[reset_password_session_key] || param(reset_password_key_param)