2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

don't use tokens as primary keys

Browse source
This commit is contained in:
Laura Klünder 2017-12-18 14:54:45 +01:00
parent afb23e5865
commit 64664fbc66
5 changed files with 50 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/c3nav/site/views.py
View file

@ -144,7 +144,7 @@ def redeem_token_after_login(request):
return
try:
token = AccessPermissionToken.objects.get(id=token)
token = AccessPermissionToken.objects.get(token=token)
except AccessPermissionToken.DoesNotExist:
return
@ -244,7 +244,7 @@ def account_view(request):
def access_redeem_view(request, token):
with transaction.atomic():
try:
token = AccessPermissionToken.objects.select_for_update().get(id=token, redeemed=False,
token = AccessPermissionToken.objects.select_for_update().get(token=token, redeemed=False,
valid_until__gte=timezone.now())
except AccessPermissionToken.DoesNotExist:
messages.error(request, _('This token does not exist or was already redeemed.'))
@ -258,7 +258,7 @@ def access_redeem_view(request, token):
if not request.user.is_authenticated:
messages.info(request, _('You need to log in to unlock areas.'))
request.session['redeem_token_on_login'] = str(token.id)
request.session['redeem_token_on_login'] = str(token.token)
return redirect('site.login')
token.redeemed_by = request.user