khushalps/api_utils_converse_v2
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

(20250221) Session token handling to avoid exception in timed OTP APIs.

Browse Source
This commit is contained in:
khushal
2025-02-21 11:13:31 +05:30
parent d16fa61ec3
commit 3f23e186ba
1 changed files with 4 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
api/blueprints/common/otp/timed_otp.py
+4 -10
View File
@@ -163,14 +163,11 @@ async def generate_otp(
# Either the session must be valid, or # Either the session must be valid, or
# the IP address requesting the service must be whitelisted: # the IP address requesting the service must be whitelisted:
if ( if kwargs.get("session_info") is None:
kwargs.get("session_info") is None and
inbound_headers["Remote-IP"] not in current_app.whitelisted_ips
):
return ResponseModel( return ResponseModel(
status_code = StatusCodes.FAILED, status_code = StatusCodes.FAILED,
http_code = HttpCodes.UNAUTHORIZED, http_code = HttpCodes.UNAUTHORIZED,
message = "Invalid session and/or bad IP addr." message = "Invalid session."
) )
# Get the user's info: # Get the user's info:
@@ -304,14 +301,11 @@ async def verify_otp(
# Either the session must be valid, or # Either the session must be valid, or
# the IP address requesting the service must be whitelisted: # the IP address requesting the service must be whitelisted:
if ( if kwargs.get("session_info") is None:
kwargs.get("session_info") is None and
inbound_headers["Remote-IP"] not in current_app.whitelisted_ips
):
return ResponseModel( return ResponseModel(
status_code = StatusCodes.FAILED, status_code = StatusCodes.FAILED,
http_code = HttpCodes.UNAUTHORIZED, http_code = HttpCodes.UNAUTHORIZED,
message = "Invalid session and/or bad IP addr." message = "Invalid session."
) )
# Get the user's info: # Get the user's info: