Security: don't log subclient token.
This commit is contained in:
parent
aeee165ad8
commit
bd8e0e56a4
@ -62,7 +62,7 @@ def validate_subclient_token(user_id, scst):
|
||||
client_id = current_app.config['BLENDER_ID_CLIENT_ID']
|
||||
subclient_id = current_app.config['BLENDER_ID_SUBCLIENT_ID']
|
||||
|
||||
log.debug('Validating subclient token %s for Blender ID user %s', scst, user_id)
|
||||
log.debug('Validating subclient token for Blender ID user %s', user_id)
|
||||
payload = {'client_id': client_id,
|
||||
'subclient_id': subclient_id,
|
||||
'user_id': user_id,
|
||||
|
@ -42,6 +42,7 @@ class BlenderIdSubclientTest(AbstractPillarTest):
|
||||
|
||||
user_info = json.loads(resp.data) # {'status': 'success', 'subclient_user_id': '...'}
|
||||
self.assertEqual('success', user_info['status'])
|
||||
|
||||
# Check that the user was correctly updated
|
||||
with self.app.test_request_context():
|
||||
users = self.app.data.driver.db['users']
|
||||
|
Loading…
x
Reference in New Issue
Block a user