Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add missing refresh token when rotate and blacklist app are enabled #213

Closed
wants to merge 1 commit into from

Commits on Jan 21, 2021

  1. Add missing refresh token when rotate and blacklist app are enabled

    If ROTATE_REFRESH_TOKENS setting is set to True and blacklist app is enabled the refresh token that's sent when you call the token_refresh url is blacklisted.
    The issue is that there is no new refresh token cookie sent back to the client.
    This commit resolve that by creating and sending back a new refresh_token to the client.
    SpicyPaper committed Jan 21, 2021
    Configuration menu
    Copy the full SHA
    4a1eda9 View commit details
    Browse the repository at this point in the history