Delete Refresh token before Access Token to avoid cascade deadlock

jazzband · Feb 14, 2018 · 859c39d · 859c39d
1 parent f41d0df
commit 859c39d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/oauth2_provider/models.py b/oauth2_provider/models.py
@@ -335,8 +335,10 @@ def revoke(self):
         Delete this refresh token along with related access token
         """
         access_token_model = get_access_token_model()
-        access_token_model.objects.get(id=self.access_token.id).revoke()
+        token = access_token_model.objects.get(id=self.access_token.id)
+        # Avoid cascade by deleting self first.
         self.delete()
+        token.revoke()
 
     def __str__(self):
         return self.token