token信息转移到headers,兼容url参数

This commit is contained in:
2020-09-08 20:21:57 +08:00
parent a4ddce07d0
commit 503559d06c

View File

@@ -9,7 +9,7 @@ def tmp_token():
return hash_name(str(int(time.time() / 900)) + User.query.get(1).token)[5:21] return hash_name(str(int(time.time() / 900)) + User.query.get(1).token)[5:21]
def require_token(): def require_token():
token = request.args.get('user_token') token = request.headers.get('User-Token') or request.args.get('user_token')
if not token: abort(401) if not token: abort(401)
if len(token.split('_')) == 2 and get_config('ENABLE_TMP'): if len(token.split('_')) == 2 and get_config('ENABLE_TMP'):