Switch from OIDC UserInfo to OAuth 2.0 Token Introspection #1
@@ -69,7 +69,7 @@ def setup() -> None:
|
|||||||
|
|
||||||
token = request.cookies.get(token_cookie)
|
token = request.cookies.get(token_cookie)
|
||||||
user_info = oauth.authorize(token)
|
user_info = oauth.authorize(token)
|
||||||
if not user_info or not user_info.active:
|
if not user_info or not user_info['active']:
|
||||||
return Response(status=403)
|
return Response(status=403)
|
||||||
|
|
||||||
if not check_access(user_info['entitlements']):
|
if not check_access(user_info['entitlements']):
|
||||||
|
|||||||
Reference in New Issue
Block a user