From b261a2041a3cf33aed75c93a87f140f7255948b6 Mon Sep 17 00:00:00 2001 From: Raphael Michel Date: Tue, 2 Apr 2019 09:44:09 +0200 Subject: [PATCH] Actually set the revoked flag --- src/pretix/api/views/device.py | 2 +- src/pretix/control/views/organizer.py | 2 +- src/tests/api/test_deviceauth.py | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/src/pretix/api/views/device.py b/src/pretix/api/views/device.py index 535300fadb..9f5766a348 100644 --- a/src/pretix/api/views/device.py +++ b/src/pretix/api/views/device.py @@ -105,7 +105,7 @@ class RevokeKeyView(APIView): def post(self, request, format=None): device = request.auth - device.api_token = None + device.revoked = True device.save() device.log_action('pretix.device.revoked', auth=device) diff --git a/src/pretix/control/views/organizer.py b/src/pretix/control/views/organizer.py index 79d8bdb98c..985e9abaf7 100644 --- a/src/pretix/control/views/organizer.py +++ b/src/pretix/control/views/organizer.py @@ -756,7 +756,7 @@ class DeviceRevokeView(OrganizerDetailViewMixin, OrganizerPermissionRequiredMixi def post(self, request, *args, **kwargs): self.object = self.get_object() - self.object.api_token = None + self.object.revoked = True self.object.save() self.object.log_action('pretix.device.revoked', user=self.request.user) messages.success(request, _('Access for this device has been revoked.')) diff --git a/src/tests/api/test_deviceauth.py b/src/tests/api/test_deviceauth.py index 1f2bba40b7..8b3d14ed34 100644 --- a/src/tests/api/test_deviceauth.py +++ b/src/tests/api/test_deviceauth.py @@ -145,4 +145,4 @@ def test_revoke_valid(device_client, device: Device): resp = device_client.post('/api/v1/device/revoke') assert resp.status_code == 200 device.refresh_from_db() - assert not device.api_token + assert device.revoked