Reject revoked access_token on Streaming API. (#3367)

7 years ago · 2e429c0c25
parent e0e12b0fee
commit 2e429c0c25
1 changed files with 1 additions and 1 deletions
--- a/streaming/index.js
+++ b/streaming/index.js
@ -168,7 +168,7 @@ if (cluster.isMaster) {
        return;
      }

-      client.query('SELECT oauth_access_tokens.resource_owner_id, users.account_id, users.filtered_languages FROM oauth_access_tokens INNER JOIN users ON oauth_access_tokens.resource_owner_id = users.id WHERE oauth_access_tokens.token = $1 LIMIT 1', [token], (err, result) => {
+      client.query('SELECT oauth_access_tokens.resource_owner_id, users.account_id, users.filtered_languages FROM oauth_access_tokens INNER JOIN users ON oauth_access_tokens.resource_owner_id = users.id WHERE oauth_access_tokens.token = $1 AND oauth_access_tokens.revoked_at IS NULL LIMIT 1', [token], (err, result) => {
        done();

        if (err) {