From d4250d65aa16ff8dd7eb81097c5c0c248b5efd55 Mon Sep 17 00:00:00 2001
From: KernelDeimos <eric.alex.dube@gmail.com>
Date: Tue, 29 Jul 2025 13:34:36 -0400
Subject: [PATCH] fix: don't encrypt session UUID if there isn't one

---
 src/backend/src/services/auth/AuthService.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/backend/src/services/auth/AuthService.js b/src/backend/src/services/auth/AuthService.js
index 24c04c0b..ec275c6c 100644
--- a/src/backend/src/services/auth/AuthService.js
+++ b/src/backend/src/services/auth/AuthService.js
@@ -220,7 +220,7 @@ class AuthService extends BaseService {
                 version: '0.0.0',
                 user_uid: actor_type.user.uuid,
                 app_uid,
-                session: this.uuid_fpe.encrypt(actor_type.session),
+                ...(actor_type.session ? { session: this.uuid_fpe.encrypt(actor_type.session) } : {}),
             },
             this.global_config.jwt_secret,
         );