From 925a1d59a25ad26577cb320cd30aa0feaf84e632 Mon Sep 17 00:00:00 2001
From: WeebDataHoarder <weebdatahoarder@noreply.gammaspectra.live>
Date: Sat, 3 May 2025 17:41:50 +0200
Subject: [PATCH] challenges: return ErrNoCookie when no cookies of given name
 are present

---
 lib/challenge/data.go | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/lib/challenge/data.go b/lib/challenge/data.go
index 5898456..f947c05 100644
--- a/lib/challenge/data.go
+++ b/lib/challenge/data.go
@@ -433,7 +433,11 @@ func (d *RequestData) verifyChallengeStateCookie(cookie *http.Cookie) (TokenChal
 }
 
 func (d *RequestData) verifyChallengeState() (state TokenChallengeMap, err error) {
-	for _, cookie := range d.r.CookiesNamed(d.cookieName) {
+	cookies := d.r.CookiesNamed(d.cookieName)
+	if len(cookies) == 0 {
+		return nil, http.ErrNoCookie
+	}
+	for _, cookie := range cookies {
 		state, err = d.verifyChallengeStateCookie(cookie)
 		if err == nil {
 			return state, nil