Handle sessions without refresh token
This commit is contained in:
@@ -71,6 +71,9 @@ def login_callback():
|
|||||||
return redirect(session.pop("original_url", "/"))
|
return redirect(session.pop("original_url", "/"))
|
||||||
|
|
||||||
def do_refresh():
|
def do_refresh():
|
||||||
|
if "refresh_token" not in session:
|
||||||
|
print("no refresh token, skipping refresh")
|
||||||
|
return False
|
||||||
print("doing refreesh")
|
print("doing refreesh")
|
||||||
r = requests.post(metadata["token_endpoint"], {
|
r = requests.post(metadata["token_endpoint"], {
|
||||||
"client_secret": os.getenv("OIDC_CLIENT_SECRET"),
|
"client_secret": os.getenv("OIDC_CLIENT_SECRET"),
|
||||||
|
Reference in New Issue
Block a user