Fix: was storing the client id instead of code in the cookie
This commit is contained in:
parent
02b87262a4
commit
4042a49896
@ -68,14 +68,14 @@ async def login_for_access_token(
|
||||
)
|
||||
)
|
||||
db.commit()
|
||||
response.set_cookie(key="client_id", value=str(client.id), max_age=10 * 365 * 24 * 60 * 60)
|
||||
response.set_cookie(key="client_id", value=str(client.code), max_age=10 * 365 * 24 * 60 * 60)
|
||||
if not allowed:
|
||||
not_allowed_response = JSONResponse(
|
||||
status_code=status.HTTP_401_UNAUTHORIZED,
|
||||
headers={"WWW-Authenticate": "Bearer"},
|
||||
content={"detail": "Client is not registered"},
|
||||
)
|
||||
not_allowed_response.set_cookie(key="client_id", value=str(client.id), max_age=10 * 365 * 24 * 60 * 60)
|
||||
not_allowed_response.set_cookie(key="client_id", value=str(client.code), max_age=10 * 365 * 24 * 60 * 60)
|
||||
return not_allowed_response
|
||||
access_token_expires = timedelta(minutes=settings.JWT_TOKEN_EXPIRE_MINUTES)
|
||||
access_token = create_access_token(
|
||||
|
Loading…
Reference in New Issue
Block a user