From 8fbd7e2e074832cc07b519e446feba48fb740d05 Mon Sep 17 00:00:00 2001 From: Andrey Antukh Date: Wed, 23 Oct 2013 15:00:38 +0200 Subject: [PATCH] Properly catch wrong signature exception. --- greenmine/base/auth/__init__.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/greenmine/base/auth/__init__.py b/greenmine/base/auth/__init__.py index 193b4d67..08294079 100644 --- a/greenmine/base/auth/__init__.py +++ b/greenmine/base/auth/__init__.py @@ -37,8 +37,13 @@ def get_token_for_user(user): def get_user_for_token(token): - data = signing.loads(token) + try: + data = signing.loads(token) + except signing.BadSignature: + raise exc.BadRequest("Invalid token") + model_cls = get_model("users", "User") + try: user = model_cls.objects.get(pk=data["user_id"]) except model_cls.DoesNotExist: