FreakU
/
takahe
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow API access with cookies again

This commit is contained in:
Andrew Godwin 2023-03-02 10:22:37 -07:00
parent 026e1be357
commit 6411a375ba
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
api/decorators.py
View File

@ -32,12 +32,18 @@ def scope_required(scope: str, requires_identity=True):
@wraps(function) @wraps(function)
def inner(request, *args, **kwargs): def inner(request, *args, **kwargs):
if not request.token: if not request.token:
return JsonResponse({"error": "identity_token_required"}, status=401) if request.identity:
# They're just logged in via cookie - give full access
pass
else:
return JsonResponse(
{"error": "identity_token_required"}, status=401
)
elif not request.token.has_scope(scope):
return JsonResponse({"error": "out_of_scope_for_token"}, status=403)
# They need an identity # They need an identity
if not request.identity and requires_identity: if not request.identity and requires_identity:
return JsonResponse({"error": "identity_token_required"}, status=401) return JsonResponse({"error": "identity_token_required"}, status=401)
if not request.token.has_scope(scope):
return JsonResponse({"error": "out_of_scope_for_token"}, status=403)
return function(request, *args, **kwargs) return function(request, *args, **kwargs)
inner.csrf_exempt = True # type:ignore inner.csrf_exempt = True # type:ignore