Remove the code to delete a session after it is used.
parent
d0ece9edfd
commit
ebc7245ade
|
@ -351,12 +351,6 @@ class AuthHandler(BaseHandler):
|
||||||
list(clientdict),
|
list(clientdict),
|
||||||
)
|
)
|
||||||
|
|
||||||
# Once the authentication flow has completed and the final
|
|
||||||
# operation is requested, the session should be removed so it
|
|
||||||
# cannot be re-used.
|
|
||||||
if "type" not in authdict:
|
|
||||||
self._remove_session(session["id"])
|
|
||||||
|
|
||||||
return creds, clientdict, session["id"]
|
return creds, clientdict, session["id"]
|
||||||
|
|
||||||
ret = self._auth_dict_for_flows(flows, session)
|
ret = self._auth_dict_for_flows(flows, session)
|
||||||
|
@ -529,10 +523,6 @@ class AuthHandler(BaseHandler):
|
||||||
|
|
||||||
return self.sessions[session_id]
|
return self.sessions[session_id]
|
||||||
|
|
||||||
def _remove_session(self, session_id) -> None:
|
|
||||||
"""Remove a session (if it exists)."""
|
|
||||||
self.sessions.pop(session_id, None)
|
|
||||||
|
|
||||||
@defer.inlineCallbacks
|
@defer.inlineCallbacks
|
||||||
def get_access_token_for_user_id(
|
def get_access_token_for_user_id(
|
||||||
self, user_id: str, device_id: Optional[str], valid_until_ms: Optional[int]
|
self, user_id: str, device_id: Optional[str], valid_until_ms: Optional[int]
|
||||||
|
|
Loading…
Reference in New Issue