Whoops, only revoke the current user's Micropub tokens for a client, not every single token for that client
This commit is contained in:
parent
446029ce84
commit
35ced9a451
1 changed files with 1 additions and 3 deletions
|
@ -2,10 +2,8 @@ from django.http import HttpResponse
|
|||
from django.contrib.auth.mixins import LoginRequiredMixin
|
||||
from django.views import View
|
||||
|
||||
from ...models import Token
|
||||
|
||||
|
||||
class TokensRevokeView(LoginRequiredMixin, View):
|
||||
def delete(self, request, client_id: str):
|
||||
Token.objects.filter(client_id=client_id).delete()
|
||||
request.user.token_set.filter(client_id=client_id).delete()
|
||||
return HttpResponse(status=204)
|
||||
|
|
Loading…
Reference in a new issue