2025-summer/team-3
12
Fork 0
Code Issues Pull requests Projects Releases Activity

routing is not a write operation

Browse source
This commit is contained in:
Laura Klünder 2023-12-03 20:06:16 +01:00
parent 499eb0d1eb
commit ed94b81ecb
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/c3nav/api/newauth.py
View file

@ -71,7 +71,7 @@ class APITokenAuth(HttpBearer):
request.user = user request.user = user
return NewAPIAuth( return NewAPIAuth(
method=APIAuthMethod.SESSION, method=APIAuthMethod.SESSION,
readonly=True, readonly=False,
) )
elif token.startswith("secret:"): elif token.startswith("secret:"):
try: try:

4
src/c3nav/routing/newapi/routing.py
View file

@ -10,7 +10,7 @@ from ninja import Schema
from pydantic import PositiveInt from pydantic import PositiveInt
from c3nav.api.exceptions import APIRequestValidationFailed from c3nav.api.exceptions import APIRequestValidationFailed
from c3nav.api.newauth import auth_responses, validate_responses from c3nav.api.newauth import auth_responses, validate_responses, APITokenAuth
from c3nav.api.utils import NonEmptyStr from c3nav.api.utils import NonEmptyStr
from c3nav.mapdata.api import api_stats_clean_location_value from c3nav.mapdata.api import api_stats_clean_location_value
from c3nav.mapdata.models.access import AccessPermission from c3nav.mapdata.models.access import AccessPermission
@ -110,7 +110,7 @@ def get_request_pk(location):
return location.slug if isinstance(location, Position) else location.pk return location.slug if isinstance(location, Position) else location.pk
@routing_api_router.post('/route/', summary="query route", @routing_api_router.post('/route/', summary="query route", auth=APITokenAuth(is_readonly=True),
description="query route between two locations", description="query route between two locations",
response={200: RouteResponse | NoRouteResponse, **validate_responses, **auth_responses}) response={200: RouteResponse | NoRouteResponse, **validate_responses, **auth_responses})
# todo: route failure responses # todo: route failure responses