From be52f6c2eca815e0ae1ff9b9bfe1a86a4b13eaaf Mon Sep 17 00:00:00 2001 From: Benjamin Dauvergne Date: Wed, 22 Apr 2020 04:11:20 +0200 Subject: [PATCH] misc: sign logout message when using PRIVATE_KEYS instead of PRIVATE_KEY (#41949) --- mellon/utils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mellon/utils.py b/mellon/utils.py index b221860..7fe205e 100644 --- a/mellon/utils.py +++ b/mellon/utils.py @@ -223,7 +223,7 @@ def create_logout(request): }) logger.debug('session_dump %s', session_dump) logout = lasso.Logout(server) - if not app_settings.PRIVATE_KEY: + if not app_settings.PRIVATE_KEY and not app_settings.PRIVATE_KEYS: logout.setSignatureHint(lasso.PROFILE_SIGNATURE_HINT_FORBID) logout.setSessionFromDump(session_dump) return logout