Projet

Général

Profil

0001-auth_fc-set-session-to-expire-at-browser-close-on-lo.patch

Benjamin Dauvergne, 12 mars 2020 12:37

Télécharger (1,65 ko)

Voir les différences:

Subject: [PATCH] auth_fc: set session to expire at browser close on login
 (#40479)

 src/authentic2_auth_fc/views.py | 2 ++
 tests/auth_fc/test_auth_fc.py   | 1 +
 2 files changed, 3 insertions(+)
src/authentic2_auth_fc/views.py
443 443
                        return self.redirect(request)
444 444
        if user:
445 445
            a2_utils.login(request, user, 'france-connect', service_slug=self.service_slug)
446
            # set session expiration policy to EXPIRE_AT_BROWSER_CLOSE
447
            request.session.set_expiry(0)
446 448
            self.fc_account = models.FcAccount.objects.get(sub=self.sub, user=user)
447 449
            self.fc_account.token = json.dumps(self.token)
448 450
            self.fc_account.save(update_fields=['token'])
tests/auth_fc/test_auth_fc.py
148 148
        assert hooks.event[1]['kwargs']['service'] == 'portail'
149 149
        # we must be connected
150 150
        assert app.session['_auth_user_id']
151
        assert app.session.get_expire_at_browser_close()
151 152
        assert models.FcAccount.objects.count() == 1
152 153

  
153 154
        # test unlink cancel case
154
-