Activate blacklist app

Found by ZeroPath's Beta Business Logic Scanner https://zeropath.com
LibrePhotos · Sep 14, 2024 · e7c5348 · e7c5348
1 parent fbad78a
commit e7c5348
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/librephotos/settings/production.py b/librephotos/settings/production.py
@@ -65,6 +65,7 @@
     "api",
     "nextcloud",
     "rest_framework",
+    "rest_framework_simplejwt.token_blacklist",
     "corsheaders",
     "chunked_upload",
     "django_extensions",

diff --git a/librephotos/urls.py b/librephotos/urls.py
@@ -23,7 +23,11 @@
     TokenObtainPairSerializer,
     TokenRefreshSerializer,
 )
-from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView
+from rest_framework_simplejwt.views import (
+    TokenBlacklistView,
+    TokenObtainPairView,
+    TokenRefreshView,
+)
 
 from api.views import (
     album_auto,
@@ -215,6 +219,7 @@ def post(self, request, *args, **kwargs):
     re_path(r"^api/wordcloud", dataviz.SearchTermWordCloudView.as_view()),
     re_path(r"^api/auth/token/obtain/$", CustomTokenObtainPairView.as_view()),
     re_path(r"^api/auth/token/refresh/$", CustomTokenRefreshView.as_view()),
+    re_path(r"^api/auth/token/blacklist/", TokenBlacklistView.as_view()),
     re_path(
         r"^media/(?P<path>.*)/(?P<fname>.*)",
         views.MediaAccessFullsizeOriginalView.as_view(),