api: ignore empty nonces (#27945)

2018-11-13 15:24:27 +01:00 · 2018-11-13 15:24:27 +01:00 · c6e536e02e
parent 18dedba966
commit c6e536e02e
1 changed files with 1 additions and 1 deletions
--- a/wcs/api_utils.py
+++ b/wcs/api_utils.py
@ -71,7 +71,7 @@ def is_url_signed(utcnow=None, duration=DEFAULT_DURATION):
                                   % (duration, delta))
    # check nonce
    nonce = get_request().form.get('nonce')
-    if nonce is not None:
+    if nonce:
        # compute end date of the nonce as an unix timestamp
        until = timestamp + datetime.timedelta(seconds=duration)
        until = calendar.timegm(until.timetuple())