addwin/winofy-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add missing required_alternate_scopes across OAS-gated views #6

Merged
Ghasemi merged 1 commit from fix/required-scopes into master 2026-08-31 07:23:28 -04:00
Conversation 0 Commits 1 Files changed 5 +17 -2
5 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 674ca34041 - Show all commits

4
apps/catalog/views.py
View file

@ -51,7 +51,11 @@ class SellerProductViewSet(viewsets.ModelViewSet):
# TODO: IsStoreOwner?
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
"PUT": [[]],
"PATCH": [[]],
"DELETE": [[]],
}
def get_queryset(self):

4
apps/locations/views.py
View file

@ -29,7 +29,11 @@ class AddressViewSet(viewsets.ModelViewSet):
serializer_class = AddressSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
"PUT": [[]],
"PATCH": [[]],
"DELETE": [[]],
}
def get_queryset(self):

5
apps/orders/views.py
View file

@ -129,7 +129,7 @@ class OrderGroupViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, viewse
serializer_class = OrderGroupSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"POST": [[]],
"GET": [[]],
}
def get_queryset(self):
@ -145,6 +145,7 @@ class OrderViewSet(mixins.RetrieveModelMixin, viewsets.GenericViewSet):
serializer_class = OrderSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
}
@ -171,6 +172,7 @@ class SellerOrderViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, views
# TODO: IsStoreOwner
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
}
filterset_fields = ['status']
@ -219,6 +221,7 @@ class NotificationViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, view
serializer_class = NotificationSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
}

1
apps/reviews/views.py
View file

@ -38,6 +38,7 @@ class SellerReviewViewSet(mixins.ListModelMixin, viewsets.GenericViewSet):
# TODO:
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
}

5
apps/stores/views.py
View file

@ -72,7 +72,9 @@ class SellerStoreView(APIView):
serializer_class = SellerStoreSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"GET": [[]],
"POST": [[]],
"PATCH": [[]],
}
def get(self, request):
@ -109,7 +111,8 @@ class SellerStoreWorkingHoursView(APIView):
# TODO:
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = {
"POST": [[]],
"GET": [[]],
"PUT": [[]],
}
def get(self, request):