/-/auth-token as root redirects to /, closes #2375

This commit is contained in:
Simon Willison 2024-07-26 14:09:20 -07:00
commit 81b68a143a
2 changed files with 9 additions and 0 deletions

View file

@ -75,6 +75,9 @@ class AuthTokenView(BaseView):
has_json_alternate = False
async def get(self, request):
# If already signed in as root, redirect
if request.actor and request.actor.get("id") == "root":
return Response.redirect(self.ds.urls.instance())
token = request.args.get("token") or ""
if not self.ds._root_token:
raise Forbidden("Root token has already been used")