From 87027e9761983ba6a1d6904f0ce66436eb708f83 Mon Sep 17 00:00:00 2001
From: Haelnorr <lockedonohoe@gmail.com>
Date: Sat, 24 Jan 2026 15:11:24 +1100
Subject: [PATCH] fixed panic if loadfunc returns nil with no error

---
 hwsauth/refreshtokens.go | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hwsauth/refreshtokens.go b/hwsauth/refreshtokens.go
index c69a0dc..55678e5 100644
--- a/hwsauth/refreshtokens.go
+++ b/hwsauth/refreshtokens.go
@@ -2,6 +2,7 @@ package hwsauth
 
 import (
 	"net/http"
+	"reflect"
 
 	"git.haelnorr.com/h/golib/jwt"
 	"github.com/pkg/errors"
@@ -18,7 +19,9 @@ func (auth *Authenticator[T, TX]) refreshAuthTokens(
 	if err != nil {
 		return getNil[T](), errors.Wrap(err, "auth.load")
 	}
-
+	if reflect.ValueOf(model).IsNil() {
+		return getNil[T](), errors.New("no user matching JWT in database")
+	}
 	rememberMe := map[string]bool{
 		"session": false,
 		"exp":     true,