darkhelm/notifications-admin
1
0
Fork 0
mirror of https://github.com/GSA/notifications-admin.git synced 2026-09-08 08:28:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

Nonce is working now for invites.

Browse Source 
Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
This commit is contained in:
Cliff Hill
2024-10-15 16:52:29 -04:00
parent da6882774b
commit 8c40538334
4 changed files with 12 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/main/views/index.py
View File

@@ -18,6 +18,7 @@ from notifications_utils.url_safe_token import generate_token
def index():
if current_user and current_user.is_authenticated:
return redirect(url_for("main.choose_account"))
token = generate_token(
str(request.remote_addr),
current_app.config["SECRET_KEY"],
@@ -26,9 +27,11 @@ def index():
url = os.getenv("LOGIN_DOT_GOV_INITIAL_SIGNIN_URL")
# handle unit tests
current_app.logger.warning(f"############### {str(request.remote_addr)}")
nonce = secrets.token_urlsafe()
redis_key = f"login-nonce-{unquote(token)}"
redis_key = f"login-nonce-{unquote(nonce)}"
redis_client.set(redis_key, nonce)
if url is not None: