Opt-out working.

[wolnelektury.git] / src / api / request_validator.py

diff --git a/src/api/request_validator.py b/src/api/request_validator.py
index 690d3e9..9a4be2d 100644 (file)
--- a/src/api/request_validator.py
+++ b/src/api/request_validator.py
@@ -32,7 +32,17 @@ class PistonRequestValidator(RequestValidator):
         return request.token.secret
 
     def get_access_token_secret(self, client_key, token, request):
-        return request.token.secret
+        if request.token:
+            return request.token.secret
+        else:
+            try:
+                token = Token.objects.get(
+                    token_type=Token.ACCESS,
+                    consumer__key=client_key,
+                    key=token
+                )
+            except: return None
+            return token.secret
 
     def get_default_realms(self, client_key, request):
         return ['API']