added token auth for share link endpoint

This commit is contained in:
vabene1111
2023-03-28 15:42:34 +02:00
parent 2a5fc22dd7
commit 0ba2fa296a

View File

@@ -1401,8 +1401,10 @@ def sync_all(request):
return redirect('list_recipe_import')
@api_view(['GET'])
# @schema(AutoSchema()) #TODO add proper schema
@permission_classes([CustomIsUser & CustomTokenHasReadWriteScope])
def share_link(request, pk):
if request.user.is_authenticated:
if request.space.allow_sharing and has_group_permission(request.user, ('user',)):
recipe = get_object_or_404(Recipe, pk=pk, space=request.space)
link = ShareLink.objects.create(recipe=recipe, created_by=request.user, space=request.space)
@@ -1411,8 +1413,6 @@ def share_link(request, pk):
else:
return JsonResponse({'error': 'sharing_disabled'}, status=403)
return JsonResponse({'error': 'not_authenticated'}, status=403)
@group_required('user')
@ajax_request