users: added more secure way for fetching authentication tokens.

- we don't expose ALL on single page
- request needs a validation before viewing of each token
- will later add 2nd layer of auth.
This commit is contained in:
Marcin Kuzminski 2020-04-20 15:59:06 +02:00
parent fa30900469
commit 4ac845a76d
11 changed files with 148 additions and 14 deletions

View file

@ -301,6 +301,10 @@ def admin_routes(config):
name='edit_user_auth_tokens',
pattern='/users/{user_id:\d+}/edit/auth_tokens',
user_route=True)
config.add_route(
name='edit_user_auth_tokens_view',
pattern='/users/{user_id:\d+}/edit/auth_tokens/view',
user_route=True)
config.add_route(
name='edit_user_auth_tokens_add',
pattern='/users/{user_id:\d+}/edit/auth_tokens/new',