diff options
| author | Alon Levy <alon@pobox.com> | 2015-04-30 22:29:40 +0300 |
|---|---|---|
| committer | Alon Levy <alon@pobox.com> | 2015-04-30 22:29:40 +0300 |
| commit | 867d44a9335e3e6de357be5e0f0245dada0ee80a (patch) | |
| tree | 807f7433f6788a1a5bf7850d3f6e0aabd0b5a5a0 /src/server | |
| parent | d8efcb69b860410474893994f9f3bd08d6d0ceb9 (diff) | |
server/rz_api: allow wrong session data, just ignore for now. added FIXME to remove cookie
Diffstat (limited to 'src/server')
| -rw-r--r-- | src/server/rz_api.py | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/src/server/rz_api.py b/src/server/rz_api.py index 223c494a..fbd71e8c 100644 --- a/src/server/rz_api.py +++ b/src/server/rz_api.py @@ -33,13 +33,14 @@ def rz_mainpage(rzdoc_name=None): if None != email_address: # session cookie passed & contains uid (email_address) try: _uid, u_account = current_app.user_db.lookup_user__by_email_address(email_address) - role_set = u_account.role_set - rz_username = escape(u_account.rz_username) except Exception as e: # may occur on user_db reset or malicious cookie != stale cookie, # for which the user would at least be known to the user_db - log.exception(e) - return common_resp_handle__client_error() + # FIXME: remove the cookie + pass + else: + role_set = u_account.role_set + rz_username = escape(u_account.rz_username) if None == rzdoc_name: s_rzdoc_name = current_app.rz_config.rzdoc__mainpage_name |