Merge pull request #785 from pferreir/redirect-to-login

403: Redirect user to login page if not logged in

1 files changed, 7 insertions, 1 deletions

diff --git a/lib/response.js b/lib/response.js
index ae3e45fa..d6fb3b42 100644
--- a/lib/response.js
+++ b/lib/response.js
@@ -17,7 +17,13 @@ var utils = require('./utils')
 // public
 var response = {
   errorForbidden: function (res) {
-    responseError(res, '403', 'Forbidden', 'oh no.')
+    const {req} = res
+    if (req.user) {
+      responseError(res, '403', 'Forbidden', 'oh no.')
+    } else {
+      req.flash('error', 'You are not allowed to access this page. Maybe try logging in?')
+      res.redirect(config.serverURL)
+    }
   },
   errorNotFound: function (res) {
     responseError(res, '404', 'Not Found', 'oops.')