audit: sanitize kwargs when creating audit event

2019-12-31 13:33:07 +01:00
parent 74b2b26a20
commit 766518ee0e
7 changed files with 46 additions and 9 deletions
--- a/passbook/providers/oidc/lib.py
+++ b/passbook/providers/oidc/lib.py
@ -33,7 +33,7 @@ def check_permissions(request, user, client):

    Event.new(
        EventAction.AUTHORIZE_APPLICATION,
-        authorized_application=application.pk,
+        authorized_application=application,
        skipped_authorization=False,
    ).from_http(request)
    return None