aljaz/CTFd
1
0
Fork 0
mirror of https://github.com/aljazceru/CTFd.git synced 2026-02-02 21:04:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Don't redirect the /events endpoint to login (#1132)

Browse Source 
* Detect `text/event-stream` in `authed_only` to prevent unnecessary redirects to `/login`
This commit is contained in:
Kevin Chung
2019-10-11 23:18:44 -07:00
committed by GitHub
parent a9b2fe15e3
commit 6c5c63d667
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CTFd/utils/decorators/__init__.py
View File

@@ -84,7 +84,7 @@ def authed_only(f):
if authed():
return f(*args, **kwargs)
else:
if request.content_type == "application/json":
if request.content_type == "application/json" or request.accept_mimetypes.best == "text/event-stream":
abort(403)
else:
return redirect(url_for("auth.login", next=request.full_path))