Prune expired tokens before each request

fixes 091labs#3
bugsduggan · Apr 20, 2014 · fb0f9f0 · fb0f9f0
1 parent 14962a4
commit fb0f9f0
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/uamhnach/__init__.py b/uamhnach/__init__.py
@@ -14,6 +14,13 @@
 
 @app.before_request
 def before_request():
+    # prune expired tokens
+    for token in models.Token.query.all():
+        if not token.is_valid():
+            db.session.delete(token)
+    db.session.commit()
+
+    # validate current one and set g.user
     user = None
     if 'X-Auth-Token' in request.headers:
         auth_token_id = request.headers['X-Auth-Token']