Fix fetching old access_token from refresh_token

scaredcat · scaredcat · commit b0ce48ff27c3 · 2020-03-13T14:22:20.000+11:00
diff --git a/oauth2_provider/oauth2_validators.py b/oauth2_provider/oauth2_validators.py
@@ -634,7 +634,9 @@ def validate_refresh_token(self, refresh_token, client, request, *args, **kwargs
                 seconds=oauth2_settings.REFRESH_TOKEN_GRACE_PERIOD_SECONDS
             )
         )
-        rt = RefreshToken.objects.filter(null_or_recent, token=refresh_token).first()
+        rt = RefreshToken.objects.filter(null_or_recent, token=refresh_token).select_related(
+            'access_token'
+        ).first()
 
         if not rt:
             return False

Original file line number	Diff line number	Diff line change
`@@ -634,7 +634,9 @@ def validate_refresh_token(self, refresh_token, client, request, args, *kwargs`
`634`	`634`	`seconds=oauth2_settings.REFRESH_TOKEN_GRACE_PERIOD_SECONDS`
`635`	`635`	`)`
`636`	`636`	`)`
`637`		`- rt = RefreshToken.objects.filter(null_or_recent, token=refresh_token).first()`
	`637`	`+ rt = RefreshToken.objects.filter(null_or_recent, token=refresh_token).select_related(`
	`638`	`+ 'access_token'`
	`639`	`+ ).first()`
`638`	`640`
`639`	`641`	`if not rt:`
`640`	`642`	`return False`