Check token validity when verifying OAuth2 requests.

2026-04-05 03:00:15 -04:00 · 2012-03-15 13:29:35 -07:00
parent 1fd9c0662a
commit d56046f1d0
1 changed files with 1 additions and 0 deletions
--- a/r2/r2/controllers/oauth2.py
+++ b/r2/r2/controllers/oauth2.py
@@ -212,6 +212,7 @@ class OAuth2ResourceController(MinimalController):
        try:
            access_token = OAuth2AccessToken.get_token(self._get_bearer_token())
            require(access_token)
+            require(access_token.check_valid())
            c.oauth2_access_token = access_token
            account = Account._byID36(access_token.user_id, data=True)
            require(account)