update setup cookie for tokens
This commit is contained in:
parent
1b3eececf2
commit
b20fe5e6fb
|
|
@ -38,26 +38,18 @@ class JWTGenericViewMixin(generics.GenericAPIView):
|
|||
"""
|
||||
COOKIES = list()
|
||||
|
||||
# Set max_age for tokens
|
||||
if permanent:
|
||||
access_token_max_age = settings.SIMPLE_JWT.get('ACCESS_TOKEN_LIFETIME_SECONDS')
|
||||
refresh_token_max_age = settings.SIMPLE_JWT.get('REFRESH_TOKEN_LIFETIME_SECONDS')
|
||||
else:
|
||||
access_token_max_age = settings.COOKIES_MAX_AGE
|
||||
refresh_token_max_age = settings.COOKIES_MAX_AGE
|
||||
|
||||
# Write to cookie access and refresh token with secure flag
|
||||
if access_token and refresh_token:
|
||||
_access_token = self.COOKIE(key='access_token',
|
||||
value=access_token,
|
||||
http_only=self.ACCESS_TOKEN_HTTP_ONLY,
|
||||
secure=self.ACCESS_TOKEN_SECURE,
|
||||
max_age=access_token_max_age)
|
||||
max_age=settings.COOKIES_MAX_AGE if permanent else None)
|
||||
_refresh_token = self.COOKIE(key='refresh_token',
|
||||
value=refresh_token,
|
||||
http_only=self.REFRESH_TOKEN_HTTP_ONLY,
|
||||
secure=self.REFRESH_TOKEN_SECURE,
|
||||
max_age=refresh_token_max_age)
|
||||
max_age=settings.COOKIES_MAX_AGE if permanent else None)
|
||||
COOKIES.extend((_access_token, _refresh_token))
|
||||
return COOKIES
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue
Block a user