CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-17 11:56:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

[SECURITY] Enforce session validation on oauth authorize endpoint

Browse Source
This commit is contained in:
Raphael Michel
2023-03-06 14:49:55 +01:00
parent 065e6d4024
commit 19af03c5aa
5 changed files with 152 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tests/control/test_auth.py
+1 -1
View File
@@ -757,7 +757,7 @@ class SessionTimeOutTest(TestCase):
# Regression test added after a security problem in 1.9.1
# The problem was that, once the relative timeout happened, the user was redirected
# to /control/reauth/, but loading /control/reauth/ was already considered to be
# "session activitiy". Therefore, after loding /control/reauth/, the session was no longer
# "session activity". Therefore, after loding /control/reauth/, the session was no longer
# in the timeout state and the user was able to access pages again without re-entering the
# password.
session = self.client.session