From eda18cabc400938120f19fcc0e29b1df519f6290 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C5=9Fuayip=20=C3=BCz=C3=BClmez?= Date: Tue, 28 Feb 2023 23:43:50 +0300 Subject: [PATCH] Fix possible crash in validator when 'client' key is mentioned in request body --- oauth2_provider/oauth2_validators.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/oauth2_provider/oauth2_validators.py b/oauth2_provider/oauth2_validators.py index 3e921ec99..def6b678b 100644 --- a/oauth2_provider/oauth2_validators.py +++ b/oauth2_provider/oauth2_validators.py @@ -193,7 +193,8 @@ def _load_application(self, client_id, request): assert hasattr(request, "client"), '"request" instance has no "client" attribute' try: - request.client = request.client or Application.objects.get(client_id=client_id) + if not isinstance(request.client, Application): + request.client = Application.objects.get(client_id=client_id) # Check that the application can be used (defaults to always True) if not request.client.is_usable(request): log.debug("Failed body authentication: Application %r is disabled" % (client_id))