0002-misc-allow-signed-token-to-login-view-28853.patch

Benjamin Dauvergne, 26 janvier 2022 16:01

Voir les différences: en ligne côte à côte

Subject: [PATCH 2/3] misc: allow signed token to login view (#28853)

It prevents messing with the login view from unauthorized parties.

 src/authentic2/utils/misc.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

         return continue_to_next_url(request, **kwargs)
     def login_require(request, next_url=None, login_url='auth_login', service=None, login_hint=(), **kwargs):
     def login_require(
         request, next_url=None, login_url='auth_login', service=None, login_hint=(), token=None, **kwargs
     ):
         '''Require a login and come back to current URL'''
         next_url = next_url or request.get_full_path()
-...
         elif 'login-hint' in request.session:
             # clear previous login-hint if present
             del request.session['login-hint']
         if token:
             params['token'] = signing.dumps(token)
         return redirect(request, login_url, **kwargs)
+    -

Produits Entr'ouvert » Authentic 2