Fixed #56: invalidate tokens on password change, also added change password form

This commit is contained in:
Eliot Berriot 2017-12-26 15:56:04 +01:00
parent a8a37603be
commit 3c08722e92
No known key found for this signature in database
GPG key ID: DD6965E2476E5C27
11 changed files with 195 additions and 3 deletions

View file

@ -280,8 +280,9 @@ JWT_AUTH = {
'JWT_EXPIRATION_DELTA': datetime.timedelta(days=7),
'JWT_REFRESH_EXPIRATION_DELTA': datetime.timedelta(days=30),
'JWT_AUTH_HEADER_PREFIX': 'JWT',
'JWT_GET_USER_SECRET_KEY': lambda user: user.secret_key
}
OLD_PASSWORD_FIELD_ENABLED = True
ACCOUNT_ADAPTER = 'funkwhale_api.users.adapters.FunkwhaleAccountAdapter'
CORS_ORIGIN_ALLOW_ALL = True
# CORS_ORIGIN_WHITELIST = (