From b20fe5e6fb21944e6cf79e8bab8b0d7c38e96bac Mon Sep 17 00:00:00 2001 From: Anatoly Date: Tue, 3 Sep 2019 16:25:44 +0300 Subject: [PATCH] update setup cookie for tokens --- apps/utils/views.py | 12 ++---------- 1 file changed, 2 insertions(+), 10 deletions(-) diff --git a/apps/utils/views.py b/apps/utils/views.py index 3aebe590..60c18369 100644 --- a/apps/utils/views.py +++ b/apps/utils/views.py @@ -38,26 +38,18 @@ class JWTGenericViewMixin(generics.GenericAPIView): """ COOKIES = list() - # Set max_age for tokens - if permanent: - access_token_max_age = settings.SIMPLE_JWT.get('ACCESS_TOKEN_LIFETIME_SECONDS') - refresh_token_max_age = settings.SIMPLE_JWT.get('REFRESH_TOKEN_LIFETIME_SECONDS') - else: - access_token_max_age = settings.COOKIES_MAX_AGE - refresh_token_max_age = settings.COOKIES_MAX_AGE - # Write to cookie access and refresh token with secure flag if access_token and refresh_token: _access_token = self.COOKIE(key='access_token', value=access_token, http_only=self.ACCESS_TOKEN_HTTP_ONLY, secure=self.ACCESS_TOKEN_SECURE, - max_age=access_token_max_age) + max_age=settings.COOKIES_MAX_AGE if permanent else None) _refresh_token = self.COOKIE(key='refresh_token', value=refresh_token, http_only=self.REFRESH_TOKEN_HTTP_ONLY, secure=self.REFRESH_TOKEN_SECURE, - max_age=refresh_token_max_age) + max_age=settings.COOKIES_MAX_AGE if permanent else None) COOKIES.extend((_access_token, _refresh_token)) return COOKIES