early stop for missing token

This commit is contained in:
yunlu.wen 2025-10-20 14:49:09 +08:00
parent 63eba34af7
commit 96d7127d9c
1 changed files with 4 additions and 0 deletions

View File

@ -32,6 +32,7 @@ from libs.token import (
clear_csrf_token_from_cookie, clear_csrf_token_from_cookie,
clear_refresh_token_from_cookie, clear_refresh_token_from_cookie,
extract_access_token, extract_access_token,
extract_csrf_token,
set_access_token_to_cookie, set_access_token_to_cookie,
set_csrf_token_to_cookie, set_csrf_token_to_cookie,
set_refresh_token_to_cookie, set_refresh_token_to_cookie,
@ -295,6 +296,9 @@ class RefreshTokenApi(Resource):
class LoginStatus(Resource): class LoginStatus(Resource):
def get(self): def get(self):
token = extract_access_token(request) token = extract_access_token(request)
csrf_token = extract_csrf_token(request)
if not token or not csrf_token:
return {"logged_in": False}
res = True res = True
try: try:
validated = PassportService().verify(token=token) validated = PassportService().verify(token=token)