diff options
Diffstat (limited to 'qvisqve/token_router.py')
-rw-r--r-- | qvisqve/token_router.py | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/qvisqve/token_router.py b/qvisqve/token_router.py index c510b8b..ea37065 100644 --- a/qvisqve/token_router.py +++ b/qvisqve/token_router.py @@ -137,7 +137,7 @@ class AuthorizationCodeGrant(Grant): aa = self._attempts.find_by_code(code) if aa is None: qvisqve.log.log('error', msg_text='Unknown code given', code=code) - return qvisqve.unauthorized_response('Access denied') + return qvisqve.bad_request_response('Bad request') subject_id = aa.get_subject_id() scope = aa.get_scope() @@ -148,6 +148,8 @@ class AuthorizationCodeGrant(Grant): if s in allowed ) + self._attempts.delete_by_id(aa.get_attempt_id()) + empty_token = self._generator.new_token( '', scope, subject_id=subject_id) return qvisqve.ok_response({ |