github/reddit
1
1
Fork 0
mirror of https://github.com/reddit-archive/reddit.git synced 2026-04-27 03:00:12 -04:00
Code Issues Packages Projects Releases Wiki Activity

OAuth2: OPTIONS pre-flights - don't check auth

Browse Source 
Avoid checking client authentication during pre-flight requests, since the
browser won't be sending it.
This commit is contained in:
Keith Mitchell
2015-04-06 16:32:38 -07:00
parent b6fc5e3773
commit 92cc540e16
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
r2/r2/controllers/oauth2.py
View File

@@ -195,7 +195,8 @@ class OAuth2AccessController(MinimalController):
set_extension(request.environ, "json")
MinimalController.pre(self)
require_https()
c.oauth2_client = self._get_client_auth()
if request.method != "OPTIONS":
c.oauth2_client = self._get_client_auth()
def _get_client_auth(self):
auth = request.headers.get("Authorization")