Faster and simplified hash_secret() that directly produces urlsafe entries.

This commit is contained in:
Leo Vasanko
2026-02-18 23:02:36 +00:00
parent 228a103d73
commit 8f24f267c8
7 changed files with 19 additions and 26 deletions
+1 -2
View File
@@ -16,7 +16,6 @@ import secrets
from datetime import UTC, datetime
from uuid import UUID
import base64url
import httpx
import pytest
import pytest_asyncio
@@ -1301,7 +1300,7 @@ class TestAdminSessions:
test_user,
):
"""Admin can delete their own current session."""
session_db_key = base64url.enc(hash_secret("cookie", session_token))
session_db_key = hash_secret("cookie", session_token)
response = await client.delete(
f"/auth/api/admin/users/{test_user.uuid}/sessions/{session_db_key}",
headers={**auth_headers(session_token), "Host": "localhost:4401"},