-
-
Notifications
You must be signed in to change notification settings - Fork 795
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Duplicate Client Token Every Login #429
Comments
I have noticed this as well. I'd love a PR for it if you can, otherwise I'll take a crack at it. |
@shane-rice-bfg have you had a chance to look into this? |
No, I have not. We have moved away from OAuth for this application. |
was this fixed? what is the solution to contribute? |
Hello @jleclanche Id like to give this a go |
@bull500 This is a really old bug report, so please make sure it still actually exists and feel free to submit a PR! |
hello @n2ygk I did the Auth Code flow twice to test this. On the http://127.0.0.1:8000/o/authorized_tokens/ page i do see the same app twice with individual token revoke links |
I am using the framework, and it seems to work flawlessly, except every time the user logs in a second time, it duplicates the authorization in at the
o/authorized_tokens
endpoint.Is there any way to prevent duplicate authorizations, or automatically remove the previous authorization upon a second login?
Currently the user can log in to all applications with out a password after the first authorization and as long as their logged into this oauth server, but each login create the duplicate client application, which is unsightly and hard to mange authorizations for the clients.
The text was updated successfully, but these errors were encountered: