fix api secret valid until

This commit is contained in:
Gwendolyn 2023-12-02 02:23:44 +01:00
parent 62eb9eb081
commit b6f3b8459f

View file

@ -79,7 +79,7 @@ class APITokenAuth(HttpBearer):
try:
secret = Secret.objects.filter(
Q(api_secret=token.removeprefix("secret:")),
Q(valid_until__isnull=True) | Q(valid_until__lt=timezone.now()),
Q(valid_until__isnull=True) | Q(valid_until__gte=timezone.now()),
).select_related("user", "user__permissions").get()
except Secret.DoesNotExist:
raise APITokenInvalid