Standardising nonce storage/retrieval through redis for both login and

invite.

Signed-off-by: Cliff Hill <clifford.hill@gsa.gov>
This commit is contained in:
Cliff Hill
2024-10-15 09:27:34 -04:00
parent 82cef7dbd3
commit d0cda995cf
4 changed files with 9 additions and 9 deletions

View File

@@ -7,12 +7,11 @@ from flask import (
redirect,
render_template,
request,
session,
url_for,
)
from flask_login import current_user
from app import status_api_client
from app import status_api_client, redis_client
from app.formatters import apply_html_class, convert_markdown_template
from app.main import main
from app.main.views.pricing import CURRENT_SMS_RATE
@@ -34,7 +33,8 @@ def index():
# handle unit tests
nonce = secrets.token_urlsafe()
session["nonce"] = nonce
redis_client.set(f"login-nonce-{token}", nonce)
if url is not None:
url = url.replace("NONCE", nonce)