Removed the expiration of access token cookies when bearer authentica…

…tion is enabled to reduce confusion during instruction.
practisec · Jun 5, 2024 · 071b0f0 · 071b0f0
1 parent 4610159
commit 071b0f0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pwnedapi/views/api.py b/pwnedapi/views/api.py
@@ -157,7 +157,8 @@ def post(self):
 
     def delete(self):
         response = Response(None, 204)
-        response.delete_cookie('access_token')
+        if not Config.get_value('BEARER_AUTH_ENABLE'):
+            response.delete_cookie('access_token')
         return response
 
 api.add_resource(TokenList, '/access-token')