Fix: was storing the client id instead of code in the cookie

This commit is contained in:
Amritanshu Agrawal 2020-12-04 14:50:11 +05:30
parent 02b87262a4
commit 4042a49896

View File

@ -68,14 +68,14 @@ async def login_for_access_token(
)
)
db.commit()
response.set_cookie(key="client_id", value=str(client.id), max_age=10 * 365 * 24 * 60 * 60)
response.set_cookie(key="client_id", value=str(client.code), max_age=10 * 365 * 24 * 60 * 60)
if not allowed:
not_allowed_response = JSONResponse(
status_code=status.HTTP_401_UNAUTHORIZED,
headers={"WWW-Authenticate": "Bearer"},
content={"detail": "Client is not registered"},
)
not_allowed_response.set_cookie(key="client_id", value=str(client.id), max_age=10 * 365 * 24 * 60 * 60)
not_allowed_response.set_cookie(key="client_id", value=str(client.code), max_age=10 * 365 * 24 * 60 * 60)
return not_allowed_response
access_token_expires = timedelta(minutes=settings.JWT_TOKEN_EXPIRE_MINUTES)
access_token = create_access_token(