diff options
| author | Frederick Muriuki Muriithi | 2024-07-24 12:06:11 -0500 |
|---|---|---|
| committer | zsloan | 2024-07-30 19:18:08 +0000 |
| commit | ca83384d5d5ad24a6a9df313aed6ffdfc31770b5 (patch) | |
| tree | 6478d5b18053054e20a051b8eaa0c27227fef947 | |
| parent | 0a748d6e87f4eecd95a3d6dc89b759a82210b6d6 (diff) | |
| download | gn-auth-ca83384d5d5ad24a6a9df313aed6ffdfc31770b5.tar.gz | |
JWT refresh: Deactivate the checks and revocation
The checks for whether a token is already linked, and then revoking it
and raising an error were causing issues in multi-threaded
environments, where there'd be multiple requests to the auth server
all using an expired token.
This just links the refresh token and avoids the check and revocation
for the time being.
| -rw-r--r-- | gn_auth/auth/authentication/oauth2/models/jwtrefreshtoken.py | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/gn_auth/auth/authentication/oauth2/models/jwtrefreshtoken.py b/gn_auth/auth/authentication/oauth2/models/jwtrefreshtoken.py index 31c9147..58dd14a 100644 --- a/gn_auth/auth/authentication/oauth2/models/jwtrefreshtoken.py +++ b/gn_auth/auth/authentication/oauth2/models/jwtrefreshtoken.py @@ -159,10 +159,12 @@ def link_child_token(conn: db.DbConnection, parenttoken: str, childtoken: str): lambda _tok: revoke_refresh_token(conn, _tok)) raise InvalidGrantError(_error_msg_) + def __handle_not_found__(_error_msg_): + raise InvalidGrantError(_error_msg_) + load_refresh_token(conn, parenttoken).maybe( - Left("Token not found"), Right).then( - __check_child__).either(__revoke_and_raise_error__, - __link_to_child__) + Left("Token not found"), Right).either( + __handle_not_found__, __link_to_child__) def is_refresh_token_valid(token: JWTRefreshToken, client: OAuth2Client) -> bool: |