Actually set the revoked flag

This commit is contained in:
Raphael Michel
2019-04-02 09:44:09 +02:00
parent 2d37c6d94d
commit b261a2041a
3 changed files with 3 additions and 3 deletions

View File

@@ -105,7 +105,7 @@ class RevokeKeyView(APIView):
def post(self, request, format=None): def post(self, request, format=None):
device = request.auth device = request.auth
device.api_token = None device.revoked = True
device.save() device.save()
device.log_action('pretix.device.revoked', auth=device) device.log_action('pretix.device.revoked', auth=device)

View File

@@ -756,7 +756,7 @@ class DeviceRevokeView(OrganizerDetailViewMixin, OrganizerPermissionRequiredMixi
def post(self, request, *args, **kwargs): def post(self, request, *args, **kwargs):
self.object = self.get_object() self.object = self.get_object()
self.object.api_token = None self.object.revoked = True
self.object.save() self.object.save()
self.object.log_action('pretix.device.revoked', user=self.request.user) self.object.log_action('pretix.device.revoked', user=self.request.user)
messages.success(request, _('Access for this device has been revoked.')) messages.success(request, _('Access for this device has been revoked.'))

View File

@@ -145,4 +145,4 @@ def test_revoke_valid(device_client, device: Device):
resp = device_client.post('/api/v1/device/revoke') resp = device_client.post('/api/v1/device/revoke')
assert resp.status_code == 200 assert resp.status_code == 200
device.refresh_from_db() device.refresh_from_db()
assert not device.api_token assert device.revoked