Add sid to next_link for email validation (#6097)

pull/6101/head
J. Ryan Stinnett 2019-09-24 14:39:50 +01:00 committed by GitHub
parent 50776261e1
commit 40fb00f5b7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 11 additions and 0 deletions

1
changelog.d/6097.bugfix Normal file
View File

@ -0,0 +1 @@
Add sid to next_link for email validation.

View File

@ -18,6 +18,7 @@
"""Utilities for interacting with Identity Servers"""
import logging
import urllib
from canonicaljson import json
@ -328,6 +329,15 @@ class IdentityHandler(BaseHandler):
# Generate a session id
session_id = random_string(16)
if next_link:
# Manipulate the next_link to add the sid, because the caller won't get
# it until we send a response, by which time we've sent the mail.
if "?" in next_link:
next_link += "&"
else:
next_link += "?"
next_link += "sid=" + urllib.parse.quote(session_id)
# Generate a new validation token
token = random_string(32)