Use the login_user Cookie to authorize download requests instead of

passing the UserKey over url params.
This commit is contained in:
Michael Shavit
2019-12-08 15:33:57 -05:00
parent fffa2d5a1b
commit 2b55b9b250
2 changed files with 21 additions and 30 deletions
+2 -4
View File
@@ -218,10 +218,8 @@ def get_metadata__v1(book_uuid):
def get_download_url_for_book(book):
return "{url_base}/download/{book_id}/kepub?{auth_token_param}".format(
url_base=config.config_server_url,
book_id=book.id,
auth_token_param=kobo_auth.get_auth_url_param(request),
return "{url_base}/download/{book_id}/kepub".format(
url_base=config.config_server_url, book_id=book.id
)