API Malformed Token re-fix 04/73404/1 laas-3.0
authorJustin Choquette <jchoquette@iol.unh.edu>
Tue, 7 Jun 2022 20:07:54 +0000 (16:07 -0400)
committerJustin Choquette <jchoquette@iol.unh.edu>
Tue, 7 Jun 2022 20:47:39 +0000 (16:47 -0400)
Change-Id: Ie9d93a9c6f6aeee46aac8ff4d0d4d85270fe1da9
Signed-off-by: Justin Choquette <jchoquette@iol.unh.edu>
Fixed flake8 issue.

Change-Id: I3e889e4f8c6ff1a5ed5d007e1b1ff7e50f3687da
Signed-off-by: Justin Choquette <jchoquette@iol.unh.edu>
src/api/views.py

index 1516374..ffa9b3f 100644 (file)
@@ -430,7 +430,11 @@ def auth_and_log(request, endpoint):
         token = Token.objects.get(key=user_token)
     except Token.DoesNotExist:
         token = None
-        response = HttpResponse('Unauthorized', status=401)
+        # Added logic to detect malformed token
+        if len(str(user_token)) != 40:
+            response = HttpResponse('Malformed Token', status=401)
+        else:
+            response = HttpResponse('Unauthorized', status=401)
 
     x_forwarded_for = request.META.get('HTTP_X_FORWARDED_FOR')
     if x_forwarded_for: