search

jpadilla / django-rest-framework-jwt

JSON Web Token Authentication support for Django REST Framework
http://jpadilla.github.io/django-rest-framework-jwt/
MIT License
3.19k stars 649 forks source link

jwt_get_secret_key check if user exists #384

Open ghost opened 6 years ago

ghost commented 6 years ago

When a user with a deleted account tries to access the website with a JWT that is still valid, it causes an error 500. This checks if the user with the given pk exists, and if not, it will return the api_settings.JWT_SECRET_KEY instead of the deleted user's secret key

detectedstealth commented 5 years ago

Any ETA on when this will be merged? I ran into the same issue with a deleted user.