From 511a7e2ddedcead056292ea879ee649af8f6623f Mon Sep 17 00:00:00 2001 From: Revant Nandgaonkar Date: Tue, 28 Feb 2017 15:51:23 +0530 Subject: [PATCH] [Fix] set user from refresh token if not found Use frappe.db.get_value instead of frappe.get_doc to fetch value of user from bearer/refresh_token --- frappe/oauth.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frappe/oauth.py b/frappe/oauth.py index cc86ada6a0..2cca922fee 100644 --- a/frappe/oauth.py +++ b/frappe/oauth.py @@ -204,7 +204,7 @@ class OAuthWebRequestValidator(RequestValidator): otoken = frappe.new_doc("OAuth Bearer Token") otoken.client = request.client['name'] - otoken.user = request.user if request.user else frappe.get_doc("OAuth Bearer Token", {"refresh_token":request.body.get("refresh_token")}).user + otoken.user = request.user if request.user else frappe.db.get_value("OAuth Bearer Token", {"refresh_token":request.body.get("refresh_token")}, "user") otoken.scopes = get_url_delimiter().join(request.scopes) otoken.access_token = token['access_token'] otoken.refresh_token = token.get('refresh_token')