search

flavors / django-graphql-jwt

JSON Web Token (JWT) authentication for Graphene Django
https://django-graphql-jwt.domake.io
MIT License
820 stars 172 forks source link

Breaks when users are deleted #330

Closed pfcodes closed 7 months ago

pfcodes commented 7 months ago

If a logged in user has their Django User instance deleted, this package completely breaks. Either it will return a different user instance or return a message like "get() returned more than one User -- it returned 3!"

We had reports on our production app of users being logged into other people's accounts after their account was deleted.

pfcodes commented 7 months ago

Closing this because it was an issue with another authentication backend