Storing social access tokens is now optional (closes pennersr#665)

Author: pennersr

ChangeLog

@@ -1,3 +1,8 @@
+2014-08-08  Raymond Penners  <raymond.penners@intenct.nl>
+
+	* Storing social access tokens is now optional
+	(`SOCIALACCOUNT_STORE_TOKENS`).
+
 2014-07-26  Raymond Penners  <raymond.penners@intenct.nl>
 
 	* Removed the inline Javascript from the `fbconnect.html`

allauth/socialaccount/app_settings.py

@@ -63,6 +63,10 @@ def ADAPTER(self):
     def FORMS(self):
         return self._setting('FORMS', {})
 
+    @property
+    def STORE_TOKENS(self):
+        return self._setting('STORE_TOKENS', True)
+
 
 # Ugly? Guido recommends this himself ...
 # http://mail.python.org/pipermail/python-ideas/2012-May/014969.html

allauth/socialaccount/models.py

@@ -18,6 +18,7 @@
 from allauth.utils import (get_user_model, serialize_instance,
                            deserialize_instance)
 
+from . import app_settings
 from . import providers
 from .fields import JSONField
 
@@ -220,7 +221,7 @@ def save(self, request, connect=False):
         user.save()
         self.account.user = user
         self.account.save()
-        if self.token:
+        if app_settings.STORE_TOKENS and self.token:
             self.token.account = self.account
             self.token.save()
         if connect:
@@ -249,7 +250,7 @@ def lookup(self):
             self.account = a
             a.save()
             # Update token
-            if self.token:
+            if app_settings.STORE_TOKENS and self.token:
                 assert not self.token.pk
                 try:
                     t = SocialToken.objects.get(account=self.account,

docs/configuration.rst

@@ -146,3 +146,6 @@ SOCIALACCOUNT_FORMS (={})
 
 SOCIALACCOUNT_PROVIDERS (= dict)
   Dictionary containing provider specific settings.
+
+SOCIALACCOUNT_STORE_TOKENS (=True)
+  Indicates whether or not the access tokens are stored in the database.