00dani/lemoncurry
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity

Whoops, only revoke the current user's Micropub tokens for a client, not every single token for that client

Browse source
This commit is contained in:
Danielle McLean 2018-06-28 08:38:55 +10:00
parent 446029ce84
commit 35ced9a451
Signed by: 00dani
GPG key ID: 8EB789DDF3ABD240
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
lemonauth/views/tokens/revoke.py
View file

@ -2,10 +2,8 @@ from django.http import HttpResponse
from django.contrib.auth.mixins import LoginRequiredMixin from django.contrib.auth.mixins import LoginRequiredMixin
from django.views import View from django.views import View
from ...models import Token
class TokensRevokeView(LoginRequiredMixin, View): class TokensRevokeView(LoginRequiredMixin, View):
def delete(self, request, client_id: str): def delete(self, request, client_id: str):
Token.objects.filter(client_id=client_id).delete() request.user.token_set.filter(client_id=client_id).delete()
return HttpResponse(status=204) return HttpResponse(status=204)