token信息转移到headers，兼容url参数

5 years ago · 503559d06c
1 changed files with 1 additions and 1 deletions
--- a/utils.py
+++ b/utils.py
@ -9,7 +9,7 @@ def tmp_token():
    return hash_name(str(int(time.time() / 900)) + User.query.get(1).token)[5:21]

 def require_token():
-    token = request.args.get('user_token')
+    token = request.headers.get('User-Token') or request.args.get('user_token')
    if not token: abort(401)

    if len(token.split('_')) == 2 and get_config('ENABLE_TMP'):