Skip to content

🐛(backend) allow using search endpoint without refresh token enabled#2097

Open
lunika wants to merge 1 commit intomainfrom
fix/search_without_refresh_token
Open

🐛(backend) allow using search endpoint without refresh token enabled#2097
lunika wants to merge 1 commit intomainfrom
fix/search_without_refresh_token

Conversation

@lunika
Copy link
Member

@lunika lunika commented Mar 20, 2026

Purpose

The search endpoint was using the refresh_roken method decorator. This decorator force having a valid refresh token stored in the session for the entire viewset. The search endpoint still allow having the legacy search behavior and for this we don't need to configure at all the OIDC refrsh mechanism.

Proposal

  • 🐛(backend) allow using search endpoint without refresh token enabled

Fix #2087

@lunika lunika requested a review from qbey March 20, 2026 14:19
@lunika lunika self-assigned this Mar 20, 2026
@lunika lunika added the bug Something isn't working label Mar 20, 2026
The search endpoint was using the refresh_roken method decorator. This
decorator force having a valid refresh token stored in the session for
the entire viewset. The search endpoint still allow having the legacy
search behavior and for this we don't need to configure at all the OIDC
refrsh mechanism.
@lunika lunika force-pushed the fix/search_without_refresh_token branch from 16fc805 to 1df029d Compare March 20, 2026 14:44
@mascarpon3
Copy link
Contributor

how is it solving anything ? when you turn oidc back on to activate Find you will run into the same issue.

@lunika
Copy link
Member Author

lunika commented Mar 20, 2026

This PR is not made to fix the refresh token lifetime but to allow the use of the legacy search when you didn't activate the refresh token storage.

So yes, it resolves the main issue we have: using the normal/legacy search without a refresh token stored in the session.

It does the same thing you made in your PR, differently, still relying on the django-lasuite middleware when needed. And it was what I mentioned in my last review, and you didn't want to consider it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Search endpoint does not work without OIDC refresh token

3 participants