[FIX] auth_partner: Fix directory rights on token generation

paradoxxxzero · paradoxxxzero · commit 34236abacf56 · 2024-11-07T18:01:04.000+01:00
diff --git a/auth_partner/models/auth_directory.py b/auth_partner/models/auth_directory.py
@@ -147,6 +147,8 @@ def _send_mail_impl(self, type_or_template, auth_partner, **context):
         return f"Mail {template.name} sent to {auth_partner.login}"
 
     def _generate_token(self, action, auth_partner, expiration_delta, key_salt=""):
+        # We need to sudo here as secret_key is a protected field
+        self = self.sudo()
         return jwt.encode(
             {
                 "exp": datetime.now(tz=timezone.utc) + expiration_delta,

Original file line number	Diff line number	Diff line change
`@@ -147,6 +147,8 @@ def _send_mail_impl(self, type_or_template, auth_partner, **context):`
`147`	`147`	`return f"Mail {template.name} sent to {auth_partner.login}"`
`148`	`148`
`149`	`149`	`def _generate_token(self, action, auth_partner, expiration_delta, key_salt=""):`
	`150`	`+ # We need to sudo here as secret_key is a protected field`
	`151`	`+ self = self.sudo()`
`150`	`152`	`return jwt.encode(`
`151`	`153`	`{`
`152`	`154`	`"exp": datetime.now(tz=timezone.utc) + expiration_delta,`