Commit b2ca8fcd authored by Markus Mößler's avatar Markus Mößler
Browse files

added using of get_secure_cookie instead of get_signed_cookie in blog.py file

parent 4c7badfe

tornado-backend/blog.py

+2 −1
Original line number Diff line number Diff line
@@ -125,7 +125,8 @@ class BaseHandler(tornado.web.RequestHandler): 
    async def prepare(self):

        # get_current_user cannot be a coroutine, so set

        # self.current_user in prepare instead.

        user_id = self.get_signed_cookie("blogdemo_user")

        # user_id = self.get_signed_cookie("blogdemo_user")

        user_id = self.get_secure_cookie("blogdemo_user")

        if user_id:

            self.current_user = await self.queryone(

                "SELECT * FROM authors WHERE id = %s", int(user_id)