vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Have require_fresh_login not apply if there is no password set for the user

Browse source
This commit is contained in:
Joseph Schorr 2014-09-04 19:47:12 -04:00
parent 1a230f635a
commit 987177fd7e
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
endpoints/api/__init__.py
View file

@ -285,7 +285,7 @@ def require_fresh_login(func):
last_login = session.get('login_time', datetime.datetime.min) last_login = session.get('login_time', datetime.datetime.min)
valid_span = datetime.datetime.now() - datetime.timedelta(minutes=10) valid_span = datetime.datetime.now() - datetime.timedelta(minutes=10)
if last_login >= valid_span: if not user.password_hash or last_login >= valid_span:
return func(*args, **kwargs) return func(*args, **kwargs)
raise FreshLoginRequired() raise FreshLoginRequired()