0002-misc-allow-signed-token-to-login-view-28853.patch

Benjamin Dauvergne, 17 février 2022 19:39

Voir les différences: en ligne côte à côte

Subject: [PATCH 2/3] misc: allow signed token to login view (#28853)

It prevents messing with the login view from unauthorized parties.

 src/authentic2/utils/misc.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

         return continue_to_next_url(request, **kwargs)
     def login_require(request, next_url=None, login_url='auth_login', login_hint=(), **kwargs):
     def login_require(request, next_url=None, login_url='auth_login', login_hint=(), token=None, **kwargs):
         '''Require a login and come back to current URL'''
         next_url = next_url or request.get_full_path()
-...
         elif 'login-hint' in request.session:
             # clear previous login-hint if present
             del request.session['login-hint']
         if token:
             params['token'] = crypto.dumps(token)
         return redirect(request, login_url, **kwargs)
+    -

Produits Entr'ouvert » Authentic 2