From 882963c1c7f80d348da18da441384638a4ec09ed Mon Sep 17 00:00:00 2001 From: Jon Besga Date: Sat, 14 Apr 2018 18:14:14 +0100 Subject: [PATCH] Changing self._authorized property after log_out() Making a client to `log_out()` doesn't remove the authorized status, allowing the client to bypass `client.is_user_authorized()`. --- telethon/telegram_client.py | 1 + 1 file changed, 1 insertion(+) diff --git a/telethon/telegram_client.py b/telethon/telegram_client.py index 05926216..4d2fd54f 100644 --- a/telethon/telegram_client.py +++ b/telethon/telegram_client.py @@ -494,6 +494,7 @@ class TelegramClient(TelegramBareClient): self.disconnect() self.session.delete() + self._authorized = False return True def get_me(self, input_peer=False):