From 7a6187b95f265b2f3008c3fd61c77466b1b3a833 Mon Sep 17 00:00:00 2001
From: Bai <baijiangjie@gmail.com>
Date: Wed, 3 Sep 2025 18:04:45 +0800
Subject: [PATCH] fix: temp token backend

---
 apps/authentication/backends/token.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/authentication/backends/token.py b/apps/authentication/backends/token.py
index 8881448de..eb4be040f 100644
--- a/apps/authentication/backends/token.py
+++ b/apps/authentication/backends/token.py
@@ -14,7 +14,9 @@ class TempTokenAuthBackend(JMSBaseAuthBackend):
         return settings.AUTH_TEMP_TOKEN
 
     def authenticate(self, request, username='', password=''):
-        token = self.model.objects.filter(username=username, secret=password).first()
+        tokens = self.model.objects.filter(username=username).order_by('-date_created')[:500]
+        token = next((t for t in tokens if t.secret == password), None)
+
         if not token:
             return None
         if not token.is_valid: