From cd5877690a908a13ae2ef50e1d9f5ffaaf70ed19 Mon Sep 17 00:00:00 2001 From: Benjamin Dauvergne Date: Sat, 16 May 2020 11:36:14 +0200 Subject: [PATCH 2/2] auth_fc: check request and session exist in hooks (#42982) --- src/authentic2_auth_fc/__init__.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/src/authentic2_auth_fc/__init__.py b/src/authentic2_auth_fc/__init__.py index b3201ba4..2cea0430 100644 --- a/src/authentic2_auth_fc/__init__.py +++ b/src/authentic2_auth_fc/__init__.py @@ -93,7 +93,13 @@ class AppConfig(django.apps.AppConfig): def a2_hook_user_can_change_password(self, user, request, **kwargs): from authentic2.utils import get_authentication_events - if 'fc_id_token' in request.session: + if not request: + return True + try: + session = request.session + except AttributeError: + return True + if session and 'fc_id_token' in session: for authentication_event in get_authentication_events(request=request): if authentication_event['how'] == 'france-connect': return False -- 2.26.2