oauth2 ustawienia + uprawnienia
All checks were successful
continuous-integration/drone Build is passing

This commit is contained in:
Jakub K 2024-01-12 16:27:14 +01:00
parent 304764f9b7
commit 8806ad8c60
2 changed files with 15 additions and 7 deletions

View File

@ -50,7 +50,7 @@ REST_FRAMEWORK = {
OAUTH2_PROVIDER = { OAUTH2_PROVIDER = {
# this is the list of available scopes # this is the list of available scopes
'SCOPES': {'read': 'Read scope', 'write': 'Write scope', 'groups': 'Access to your groups'} 'SCOPES': {'read': 'Read scope', 'write': 'Write scope', 'main': 'Access to all'}
} }
# Application definition # Application definition

View File

@ -17,15 +17,18 @@ from jobposting.serializers import (
) )
class MyUserViewSet(viewsets.ModelViewSet): class MyUserViewSet(viewsets.ModelViewSet):
permission_classes = [ClientCredentialPermission] # test only permission_classes = [TokenHasReadWriteScope] # test only
queryset = MyUser.objects.all() queryset = MyUser.objects.all()
serializer_class = MyUserSerializer serializer_class = MyUserSerializer
requried_scope = ['main']
# permission_classes = [permissions.IsAuthenticated] # permission_classes = [permissions.IsAuthenticated]
class JobListingViewSet(viewsets.ModelViewSet): class JobListingViewSet(viewsets.ModelViewSet):
permission_classes = [ClientCredentialPermission] # test only permission_classes = [TokenHasReadWriteScope] # test only
queryset = JobListing.objects.all() queryset = JobListing.objects.all()
serializer_class = JobListingSerializer serializer_class = JobListingSerializer
requried_scope = ['main']
# permission_classes = [permissions.IsAuthenticatedOrReadOnly] # permission_classes = [permissions.IsAuthenticatedOrReadOnly]
def perform_create(self, serializer): def perform_create(self, serializer):
@ -47,9 +50,11 @@ class JobListingViewSet(viewsets.ModelViewSet):
serializer.save(anonymous_user_data=anonymous_user_data) serializer.save(anonymous_user_data=anonymous_user_data)
class SkillLevelsViewSet(viewsets.ModelViewSet): class SkillLevelsViewSet(viewsets.ModelViewSet):
permission_classes = [ClientCredentialPermission] # test only permission_classes = [TokenHasReadWriteScope] # test only
queryset = SkillLevels.objects.all() queryset = SkillLevels.objects.all()
serializer_class = SkillLevelsSerializer serializer_class = SkillLevelsSerializer
requried_scope = ['main']
# permission_classes = [permissions.IsAuthenticatedOrReadOnly] # permission_classes = [permissions.IsAuthenticatedOrReadOnly]
def create(self, request, *args, **kwargs): def create(self, request, *args, **kwargs):
@ -65,11 +70,14 @@ class SkillLevelsViewSet(viewsets.ModelViewSet):
return super().create(request, *args, **kwargs) return super().create(request, *args, **kwargs)
class CompanyLogoViewSet(viewsets.ModelViewSet): class CompanyLogoViewSet(viewsets.ModelViewSet):
permission_classes = [ClientCredentialPermission] permission_classes = [TokenHasReadWriteScope]
queryset = CompanyLogo.objects.all() queryset = CompanyLogo.objects.all()
serializer_class = CompanyLogoSerializer serializer_class = CompanyLogoSerializer
requried_scope = ['main']
class SkillViewset(viewsets.ModelViewSet): class SkillViewset(viewsets.ModelViewSet):
permission_classes = [ClientCredentialPermission] permission_classes = [TokenHasReadWriteScope]
queryset = Skill.objects.all() queryset = Skill.objects.all()
serializer_class = SkillSerializer serializer_class = SkillSerializer
requried_scope = ['main']