Users stay logged in when re-entering home if there is an active order or is an old account

This commit is contained in:
Reckless_Satoshi 2022-01-18 09:42:45 -08:00
parent 5e0639cfb3
commit ce9845cbc2
No known key found for this signature in database
GPG Key ID: 9C4585B561315571
2 changed files with 18 additions and 8 deletions

View File

@ -20,6 +20,9 @@ RoboSats is a simple and private way to exchange bitcoin for national currencies
## Contribute to the Robotic Satoshis Open Source Project ## Contribute to the Robotic Satoshis Open Source Project
See [CONTRIBUTING.md](CONTRIBUTING.md) See [CONTRIBUTING.md](CONTRIBUTING.md)
## Original idea
A simple, custody-minimized, lightning exchange using hold invoices is heavily inspired by [P2PLNBOT](https://github.com/grunch/p2plnbot) by @grunch
## License ## License
The Robotic Satoshis Open Source Project is released under the terms of the AGPL3.0 license. See [LICENSE](LICENSE) for more details. The Robotic Satoshis Open Source Project is released under the terms of the AGPL3.0 license. See [LICENSE](LICENSE) for more details.

View File

@ -315,14 +315,21 @@ class UserView(APIView):
Response with Avatar and Nickname. Response with Avatar and Nickname.
''' '''
# if request.user.id: # If an existing user opens the main page by mistake, we do not want it to create a new nickname/profile for him
# context = {} if request.user.is_authenticated:
# context['nickname'] = request.user.username context = {'nickname': request.user.username}
# participant = not Logics.validate_already_maker_or_taker(request.user) not_participant, _ = Logics.validate_already_maker_or_taker(request.user)
# context['bad_request'] = f'You are already logged in as {request.user}'
# if participant: # Does not allow this 'mistake' if an active order
# context['bad_request'] = f'You are already logged in as as {request.user} and have an active order' if not not_participant:
# return Response(context,status.HTTP_200_OK) context['bad_request'] = f'You are already logged in as {request.user} and have an active order'
return Response(context, status.HTTP_400_BAD_REQUEST)
# Does not allow this 'mistake' if the last login was sometime ago (5 minutes)
if request.user.last_login < timezone.now() - timedelta(minutes=5):
context['bad_request'] = f'You are already logged in as {request.user}'
return Response(context, status.HTTP_400_BAD_REQUEST)
token = request.GET.get(self.lookup_url_kwarg) token = request.GET.get(self.lookup_url_kwarg)