From efa2e979706046e82e27e222d9f459bf52b23d87 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Laura=20Kl=C3=BCnder?= Date: Tue, 24 Oct 2017 23:28:38 +0200 Subject: [PATCH] delete tile access cookie if it would be empty --- src/c3nav/mapdata/render/base.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/c3nav/mapdata/render/base.py b/src/c3nav/mapdata/render/base.py index 1a8b9822..ae2b1946 100644 --- a/src/c3nav/mapdata/render/base.py +++ b/src/c3nav/mapdata/render/base.py @@ -28,11 +28,13 @@ def get_render_level_ids(cache_key=None): def set_tile_access_cookie(request, response): access_permissions = AccessPermission.get_for_request(request) - if access_permissions or True: + if access_permissions: value = ','.join(str(i) for i in access_permissions)+':'+str(int(time.time())+60) key = hashlib.sha1(settings.SECRET_TILE_KEY.encode()).digest() signed = base64.b64encode(hmac.new(key, msg=value.encode(), digestmod=hashlib.sha256).digest()).decode() response.set_cookie(settings.TILE_ACCESS_COOKIE_NAME, value+':'+signed, max_age=60) + else: + response.delete_cookie(settings.TILE_ACCESS_COOKIE_NAME) class AltitudeAreaGeometries: