entrouvert
/
authentic
16
0
Fork 0
Code Issues Pull Requests 32 Releases Activity

middleware: do not emit A2_OPENED_SESSION cookie on API requests (fixes #24407)

This commit is contained in:
Benjamin Dauvergne 2018-06-10 22:27:27 +02:00
parent eb4530adcb
commit ad4b1fe051
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/authentic2/middleware.py
View File

@ -104,6 +104,9 @@ class CollectIPMiddleware(object):
class OpenedSessionCookieMiddleware(object):
def process_response(self, request, response):
# do not emit cookie for API requests
if request.path.startswith('/api/'):
return response
if not app_settings.A2_OPENED_SESSION_COOKIE_DOMAIN:
return response
name = app_settings.A2_OPENED_SESSION_COOKIE_NAME