@@ -149,15 +149,16 @@ def post_organization_user(request, payload: OrgUserCreate): # pylint: disable=
149149@user_org_router .post ("/login/" , auth = None )
150150def post_login (request , payload : LoginPayload ):
151151 """Uses the username and password in the request to return a JWT auth token"""
152+ username = payload .username .strip ()
152153 serializer = CustomTokenObtainSerializer (
153154 data = {
154- "username" : payload . username ,
155+ "username" : username ,
155156 "password" : payload .password ,
156157 }
157158 )
158159 serializer .is_valid (raise_exception = True )
159160 token_data = serializer .validated_data
160- retval = orguserfunctions .lookup_user (payload . username )
161+ retval = orguserfunctions .lookup_user (username )
161162 retval ["token" ] = token_data ["access" ]
162163 retval ["refresh_token" ] = token_data ["refresh" ]
163164 return retval
@@ -633,17 +634,18 @@ def get_organization_wren(request):
633634@user_org_router .post ("/v2/login/" , auth = None )
634635def post_login_v2 (request , payload : LoginPayload ):
635636 """Login endpoint that sets httpOnly cookies instead of returning tokens in response"""
637+ username = payload .username .strip ()
636638 serializer = CustomTokenObtainSerializer (
637639 data = {
638- "username" : payload . username ,
640+ "username" : username ,
639641 "password" : payload .password ,
640642 }
641643 )
642644 serializer .is_valid (raise_exception = True )
643645 token_data = serializer .validated_data
644646
645647 # Get user data (same as v1)
646- retval = orguserfunctions .lookup_user (payload . username )
648+ retval = orguserfunctions .lookup_user (username )
647649
648650 # Create JsonResponse and set cookies
649651 response = JsonResponse (retval )
0 commit comments