update setup cookie for tokens
This commit is contained in:
parent
1b3eececf2
commit
b20fe5e6fb
|
|
@ -38,26 +38,18 @@ class JWTGenericViewMixin(generics.GenericAPIView):
|
||||||
"""
|
"""
|
||||||
COOKIES = list()
|
COOKIES = list()
|
||||||
|
|
||||||
# Set max_age for tokens
|
|
||||||
if permanent:
|
|
||||||
access_token_max_age = settings.SIMPLE_JWT.get('ACCESS_TOKEN_LIFETIME_SECONDS')
|
|
||||||
refresh_token_max_age = settings.SIMPLE_JWT.get('REFRESH_TOKEN_LIFETIME_SECONDS')
|
|
||||||
else:
|
|
||||||
access_token_max_age = settings.COOKIES_MAX_AGE
|
|
||||||
refresh_token_max_age = settings.COOKIES_MAX_AGE
|
|
||||||
|
|
||||||
# Write to cookie access and refresh token with secure flag
|
# Write to cookie access and refresh token with secure flag
|
||||||
if access_token and refresh_token:
|
if access_token and refresh_token:
|
||||||
_access_token = self.COOKIE(key='access_token',
|
_access_token = self.COOKIE(key='access_token',
|
||||||
value=access_token,
|
value=access_token,
|
||||||
http_only=self.ACCESS_TOKEN_HTTP_ONLY,
|
http_only=self.ACCESS_TOKEN_HTTP_ONLY,
|
||||||
secure=self.ACCESS_TOKEN_SECURE,
|
secure=self.ACCESS_TOKEN_SECURE,
|
||||||
max_age=access_token_max_age)
|
max_age=settings.COOKIES_MAX_AGE if permanent else None)
|
||||||
_refresh_token = self.COOKIE(key='refresh_token',
|
_refresh_token = self.COOKIE(key='refresh_token',
|
||||||
value=refresh_token,
|
value=refresh_token,
|
||||||
http_only=self.REFRESH_TOKEN_HTTP_ONLY,
|
http_only=self.REFRESH_TOKEN_HTTP_ONLY,
|
||||||
secure=self.REFRESH_TOKEN_SECURE,
|
secure=self.REFRESH_TOKEN_SECURE,
|
||||||
max_age=refresh_token_max_age)
|
max_age=settings.COOKIES_MAX_AGE if permanent else None)
|
||||||
COOKIES.extend((_access_token, _refresh_token))
|
COOKIES.extend((_access_token, _refresh_token))
|
||||||
return COOKIES
|
return COOKIES
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue
Block a user