Cleaning up session if no valid access_token key has been found

GeoNode · Feb 5, 2019 · 6bd835a · 6bd835a · giohappy · Feb 5, 2019
1 parent 25f20e3
commit 6bd835a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/geonode/base/oauth.py b/geonode/base/oauth.py
@@ -113,8 +113,10 @@ def get_session_token(session):
 def get_token_object_from_session(session):
     if 'access_token' in session:
         try:
-            return AccessToken.objects.get(token=str(session['access_token']))
+            return AccessToken.objects.get(token=get_session_token(session))
         except BaseException:
+            del session['access_token']
+            session.modified = True
             return None
     return None