load the session if the session is not preloaded already

[laomatt]

Summary

When I upgraded an app to rails 7, the token controller was not pre loading the session which is necessary for the creation of the token. This is just to make sure the session is created if its not pre loaded.

[guardrails]

⚠️ We detected 1 security issue in this pull request:

Insecure Use of Language/Framework API (1)

Severity	Details	Docs
Medium	Title: User Controlled Method Invocation doorkeeper/app/controllers/doorkeeper/tokens_controller.rb Line 9 in f1f3c8f session.send(:load!) if session.id.nil?	📚

More info on how to fix Insecure Use of Language/Framework API in Ruby.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[ThisIsMissEm]

Why's the session needed for the creation of the token? The token creation only relies on the authorization code? You might want to use the before_successful_authorization configuration hook instead.