check token revoke

This commit is contained in:
Your Name 2024-06-10 17:40:04 -04:00 committed by Henri Dickson
parent 58647c6979
commit 4969b7b371

View file

@ -23,6 +23,9 @@ class OAuthAccessTokenAuth(HttpBearer):
if not tk:
logger.debug("API auth: access token not found")
return False
if tk.revoked:
logger.debug("API auth: access token revoked")
return False
request_scope = ""
request_method = request.method
if request_method in PERMITTED_READ_METHODS: