From eb5e3849f88d40effcaeae697b400af0e858de53 Mon Sep 17 00:00:00 2001 From: vapao Date: Sat, 10 Oct 2020 18:15:44 +0800 Subject: [PATCH] U improve websocket security --- spug_api/libs/middleware.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/spug_api/libs/middleware.py b/spug_api/libs/middleware.py index 391a192..336471d 100644 --- a/spug_api/libs/middleware.py +++ b/spug_api/libs/middleware.py @@ -35,7 +35,8 @@ class AuthenticationMiddleware(MiddlewareMixin): user = User.objects.filter(access_token=access_token).first() if user and x_real_ip == user.last_ip and user.token_expired >= time.time() and user.is_active: request.user = user - user.token_expired = time.time() + 8 * 60 * 60 + if request.path != '/notify/': + user.token_expired = time.time() + 8 * 60 * 60 user.save() return None response = json_response(error="验证失败，请重新登录")