From d2ac3b89bd373724244ed37ed973fe6c96e09ca2 Mon Sep 17 00:00:00 2001 From: Jakub K Date: Fri, 12 Jan 2024 16:41:21 +0100 Subject: [PATCH] oauth2 ustawienia + uprawnienia --- jobposting/permissions.py | 1 + jobposting/views.py | 10 +++++----- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/jobposting/permissions.py b/jobposting/permissions.py index d8fa72b..b576fff 100644 --- a/jobposting/permissions.py +++ b/jobposting/permissions.py @@ -5,6 +5,7 @@ class ClientCredentialPermission(BasePermission): if request.auth is None: return False grant_type = request.auth.application.get_authorization_grant_type_display() + print(grant_type) if request.user is None and grant_type == 'Client credentials': return True else: diff --git a/jobposting/views.py b/jobposting/views.py index 9dbdb2b..a886492 100644 --- a/jobposting/views.py +++ b/jobposting/views.py @@ -17,14 +17,14 @@ from jobposting.serializers import ( ) class MyUserViewSet(viewsets.ModelViewSet): - permission_classes = [TokenHasReadWriteScope] # test only + permission_classes = [ClientCredentialPermission] # test only queryset = MyUser.objects.all() serializer_class = MyUserSerializer requried_scope = ['main'] # permission_classes = [permissions.IsAuthenticated] class JobListingViewSet(viewsets.ModelViewSet): - permission_classes = [TokenHasReadWriteScope] # test only + permission_classes = [ClientCredentialPermission] # test only queryset = JobListing.objects.all() serializer_class = JobListingSerializer requried_scope = ['main'] @@ -50,7 +50,7 @@ class JobListingViewSet(viewsets.ModelViewSet): serializer.save(anonymous_user_data=anonymous_user_data) class SkillLevelsViewSet(viewsets.ModelViewSet): - permission_classes = [TokenHasReadWriteScope] # test only + permission_classes = [ClientCredentialPermission] # test only queryset = SkillLevels.objects.all() serializer_class = SkillLevelsSerializer requried_scope = ['main'] @@ -70,14 +70,14 @@ class SkillLevelsViewSet(viewsets.ModelViewSet): return super().create(request, *args, **kwargs) class CompanyLogoViewSet(viewsets.ModelViewSet): - permission_classes = [TokenHasReadWriteScope] + permission_classes = [ClientCredentialPermission] queryset = CompanyLogo.objects.all() serializer_class = CompanyLogoSerializer requried_scope = ['main'] class SkillViewset(viewsets.ModelViewSet): - permission_classes = [TokenHasReadWriteScope] + permission_classes = [ClientCredentialPermission] queryset = Skill.objects.all() serializer_class = SkillSerializer requried_scope = ['main']