On logout first invalidate all PGTs

2015-11-14 00:17:31 +01:00
parent 0012a8f65d
commit df9dd5364f
2 changed files with 18 additions and 12 deletions
--- a/cas_server/views.py
+++ b/cas_server/views.py
@ -623,7 +623,8 @@ class Proxy(View):
            # is the proxy granting ticket valid
            ticket = ProxyGrantingTicket.objects.get(
                value=self.pgt,
-                creation__gt=(timezone.now() - timedelta(seconds=ProxyGrantingTicket.VALIDITY))
+                creation__gt=(timezone.now() - timedelta(seconds=ProxyGrantingTicket.VALIDITY)),
+                validate=False
            )
            # is the pgt user allowed on the target service
            pattern.check_user(ticket.user)