globuzma/canaille-globuzma
1
0
Fork 0
forked from Github-Mirrors/canaille
Code Pull requests Activity

fixed introspection access rights

Browse source
This commit is contained in:
Éloi Rivard 2021-10-13 12:08:08 +02:00
parent 94a2c36cef
commit e2e024e8f2
1 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
canaille/oauth2utils.py
View file

@ -250,10 +250,8 @@ class IntrospectionEndpoint(_IntrospectionEndpoint):
tok = Token.filter(oauthRefreshToken=token)
if tok:
tok = tok[0]
if tok.oauthClient == client.dn:
if client.dn in tok.oauthAudience:
return tok
# if has_introspect_permission(client):
# return tok
def introspect_token(self, token):
client_id = Client.get(token.oauthClient).oauthClientID