Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include project code into project authentication token #802

Merged
merged 11 commits into from
Oct 10, 2021
Merged

Include project code into project authentication token #802

Changes from 1 commit
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
57525fc
Include project code into project authentication token
Glandos Jul 14, 2021
d9a4389
API BREAKING CHANGE the authenticate token now need project_id= param…
Glandos Jul 17, 2021
bbcc233
format code
Glandos Jul 17, 2021
4f0a616
project_id can be None in verify_token, don't make a DB request
Glandos Jul 17, 2021
0ff0b03
format
Glandos Jul 17, 2021
0a33007
be sure that project_id was not modified by verify_token
Glandos Jul 25, 2021
832a054
rename test to match test case
Glandos Jul 25, 2021
89c2756
comment code
Glandos Jul 25, 2021
e25d5db
extract function to extract HTML link
Glandos Jul 25, 2021
6c0d0e2
simplify the token
Glandos Aug 1, 2021
a67ac62
unused import
Glandos Sep 16, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
be sure that project_id was not modified by verify_token
  • Loading branch information
@Glandos
Glandos committed Sep 16, 2021
commit 0a33007adf7b5c506ed84e539589c99beb6a5a8a
7 changes: 5 additions & 2 deletions ihatemoney/web.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -206,10 +206,13 @@ def authenticate(project_id=None):
# Try to get project_id from token first
token = request.args.get("token")
if token:
zorun marked this conversation as resolved.
Show resolved Hide resolved
project_id = Project.verify_token(
verified_project_id = Project.verify_token(
token, token_type="auth", project_id=project_id
)
Glandos marked this conversation as resolved.
Show resolved Hide resolved
token_auth = True
if verified_project_id == project_id:
token_auth = True
else:
project_id = None
else:
token_auth = False
if project_id is None:
Expand Down