Bump django-oauth-toolkit from 2.4.0 to 3.0.1 (#1349)

* Bump django-oauth-toolkit from 2.4.0 to 3.0.1 Bumps [django-oauth-toolkit](https://github.com/jazzband/django-oauth-toolkit) from 2.4.0 to 3.0.1. - [Release notes](https://github.com/jazzband/django-oauth-toolkit/releases) - [Changelog](https://github.com/jazzband/django-oauth-toolkit/blob/master/CHANGELOG.md) - [Commits](jazzband/django-oauth-toolkit@2.4.0...3.0.1) --- updated-dependencies: - dependency-name: django-oauth-toolkit dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * add migration for AccessToken --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Julian B <[email protected]>
ephios-dev · Sep 13, 2024 · 41ce283 · 41ce283
1 parent e38efff
commit 41ce283
Show file tree

Hide file tree

Showing 3 changed files with 60 additions and 9 deletions.
diff --git a/ephios/api/migrations/0005_accesstoken_token_checksum_refreshtoken_token_family_and_more.py b/ephios/api/migrations/0005_accesstoken_token_checksum_refreshtoken_token_family_and_more.py
@@ -0,0 +1,52 @@
+# Generated by Django 5.0.8 on 2024-09-12 20:15
+
+import oauth2_provider.models
+from django.db import migrations, models
+from oauth2_provider.settings import oauth2_settings
+
+
+def forwards_func(apps, schema_editor):
+    """
+    Forward migration touches every "old" accesstoken.token which will cause the checksum to be computed.
+    Taken from https://github.com/jazzband/django-oauth-toolkit/pull/1491/
+    """
+    AccessToken = apps.get_model(oauth2_settings.ACCESS_TOKEN_MODEL)
+    accesstokens = AccessToken._default_manager.all()  # pylint: disable=protected-access
+    for accesstoken in accesstokens:
+        accesstoken.save(update_fields=["token_checksum"])
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("api", "0004_application_allowed_origins_and_more"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="accesstoken",
+            name="token_checksum",
+            field=oauth2_provider.models.TokenChecksumField(
+                default="", max_length=64, blank=True, null=True
+            ),
+            preserve_default=False,
+        ),
+        migrations.AddField(
+            model_name="refreshtoken",
+            name="token_family",
+            field=models.UUIDField(blank=True, editable=False, null=True),
+        ),
+        migrations.AlterField(
+            model_name="accesstoken",
+            name="token",
+            field=models.TextField(),
+        ),
+        migrations.RunPython(forwards_func, migrations.RunPython.noop),
+        migrations.AlterField(
+            model_name="accesstoken",
+            name="token_checksum",
+            field=oauth2_provider.models.TokenChecksumField(
+                blank=False, max_length=64, db_index=True, unique=True
+            ),
+        ),
+    ]
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -39,7 +39,7 @@ django-filter = "^24.0"
 djangorestframework-guardian = "^0.3.0"
 uritemplate = "^4.1.1"
 django-recurrence = "^1.11.1"
-django-oauth-toolkit = "~2.4.0"  # pinned because minor versions sometimes require migrations in our models
+django-oauth-toolkit = "~3.0.1"  # pinned because minor versions sometimes require migrations in our models
 urllib3 = "^1.26.0,<2.0.0"  # pinned because of uberspace issues with urllib3 2.0.0
 pyyaml = "^6.0.1"
 lxml = ">=4.9.3,<6.0.0"