fix: added socket timeout on rp initiated logout

italia · Mar 23, 2023 · c5a6028 · c5a6028
1 parent f30f978
commit c5a6028
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/spid_cie_oidc/relying_party/views/rp_initiated_logout.py b/spid_cie_oidc/relying_party/views/rp_initiated_logout.py
@@ -87,7 +87,13 @@ def oidc_rpinitiated_logout(request):
             client_assertion_type = "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
         )
         try:
-            requests.post(revocation_endpoint_url, data = revocation_request) # nosec - B113
+            requests.post(
+                revocation_endpoint_url, 
+                data = revocation_request,
+                timeout=getattr(
+                    settings, "HTTPC_TIMEOUT", 8
+                )
+            ) # nosec - B113
         except Exception as e: # pragma: no cover
             logger.warning(f"Token revocation failed: {e}")
         auth_tokens.update(revoked = timezone.localtime())