github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Tests and docs for /-/create-token, refs #1852

Browse source
This commit is contained in:
Simon Willison 2022-10-25 19:04:05 -07:00
commit 7ab091e8ef
3 changed files with 93 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

14
datasette/views/special.py
View file

@ -170,9 +170,16 @@ class CreateTokenView(BaseView):
name = "create_token"
has_json_alternate = False
async def get(self, request):
def check_permission(self, request):
if not request.actor:
raise Forbidden("You must be logged in to create a token")
if not request.actor.get("id"):
raise Forbidden(
"You must be logged in as an actor with an ID to create a token"
)
async def get(self, request):
self.check_permission(request)
return await self.render(
["create_token.html"],
request,
@ -180,8 +187,7 @@ class CreateTokenView(BaseView):
)
async def post(self, request):
if not request.actor:
raise Forbidden("You must be logged in to create a token")
self.check_permission(request)
post = await request.post_vars()
expires = None
errors = []
@ -203,7 +209,7 @@ class CreateTokenView(BaseView):
token = None
if not errors:
token_bits = {
"a": request.actor,
"a": request.actor["id"],
"e": (int(time.time()) + expires) if expires else None,
}
token = "dstok_{}".format(self.ds.sign(token_bits, "token"))