Skip to content

Commit 49bf609

Browse files
committed
Updated the @require_api_key decorator to not check for recent login dates for staff (which would include robots)
- Legacy-Id: 17937
1 parent c3b05d4 commit 49bf609

1 file changed

Lines changed: 4 additions & 3 deletions

File tree

ietf/utils/decorators.py

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,9 +63,10 @@ def err(code, text):
6363
# Check time since regular login
6464
person = key.person
6565
last_login = person.user.last_login
66-
time_limit = (datetime.datetime.now() - datetime.timedelta(days=settings.UTILS_APIKEY_GUI_LOGIN_LIMIT_DAYS))
67-
if last_login == None or last_login < time_limit:
68-
return err(400, "Too long since last regular login")
66+
if not person.user.is_staff:
67+
time_limit = (datetime.datetime.now() - datetime.timedelta(days=settings.UTILS_APIKEY_GUI_LOGIN_LIMIT_DAYS))
68+
if last_login == None or last_login < time_limit:
69+
return err(400, "Too long since last regular login")
6970
# Log in
7071
login(request, person.user)
7172
# restore the user.last_login field, so it reflects only gui logins

0 commit comments

Comments
 (0)