summaryrefslogtreecommitdiff
path: root/qvisqve/token_router.py
diff options
context:
space:
mode:
Diffstat (limited to 'qvisqve/token_router.py')
-rw-r--r--qvisqve/token_router.py4
1 files changed, 3 insertions, 1 deletions
diff --git a/qvisqve/token_router.py b/qvisqve/token_router.py
index c510b8b..ea37065 100644
--- a/qvisqve/token_router.py
+++ b/qvisqve/token_router.py
@@ -137,7 +137,7 @@ class AuthorizationCodeGrant(Grant):
aa = self._attempts.find_by_code(code)
if aa is None:
qvisqve.log.log('error', msg_text='Unknown code given', code=code)
- return qvisqve.unauthorized_response('Access denied')
+ return qvisqve.bad_request_response('Bad request')
subject_id = aa.get_subject_id()
scope = aa.get_scope()
@@ -148,6 +148,8 @@ class AuthorizationCodeGrant(Grant):
if s in allowed
)
+ self._attempts.delete_by_id(aa.get_attempt_id())
+
empty_token = self._generator.new_token(
'', scope, subject_id=subject_id)
return qvisqve.ok_response({