Skip to content

Release new version to PyPI to address bad default value for RefreshToken revoked #589

@wli

Description

@wli

The version on pypi (1.1.0) contains a critical bug that invalidates all refresh tokens when running a migration, and is NOT noted in the changelog. This was corrected in a follow-up pull request, but was not released yet.

83ec4ac

I just ran into this bug in my production instance, which logged out all my users. For anyone else who hits this, you can run the following code AFTER you run the migration (0006_auto_20171214_2232).

from oauth2_provider.models import RefreshToken
RefreshToken.objects.update(revoked=None)

@jleclanche

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions