trustchain-oc1-orchestral/authentik
Archived
10
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

stages/email: prevent error with duplicate token

Browse source 
closes #1827

Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
This commit is contained in:
Jens Langhammer 2021-11-25 23:17:37 +01:00
parent 121b36f35f
commit de8cf65503
1 changed files with 5 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
authentik/stages/email/stage.py
View file

@ -63,14 +63,13 @@ class EmailStageView(ChallengeStageView):
valid_delta = timedelta(
minutes=current_stage.token_expiry + 1
) # + 1 because django timesince always rounds down
token_filters = {
"user": pending_user,
"identifier": slugify(f"ak-email-stage-{current_stage.name}-{pending_user}"),
}
identifier = slugify(f"ak-email-stage-{current_stage.name}-{pending_user}")
# Don't check for validity here, we only care if the token exists
tokens = Token.objects.filter(**token_filters)
tokens = Token.objects.filter(identifier=identifier)
if not tokens.exists():
return Token.objects.create(expires=now() + valid_delta, **token_filters)
return Token.objects.create(
expires=now() + valid_delta, user=pending_user, identifier=identifier
)
token = tokens.first()
# Check if token is expired and rotate key if so
if token.is_expired: