addwin/winofy-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add missing required_alternate_scopes across OAS-gated views #6

Merged
Ghasemi merged 1 commit from fix/required-scopes into master 2026-08-31 07:23:28 -04:00
Conversation 0 Commits 1 Files changed 5 +17 -2
5 changed files with 17 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apps/catalog/views.py
View file

@ -51,7 +51,11 @@ class SellerProductViewSet(viewsets.ModelViewSet):
# TODO: IsStoreOwner? # TODO: IsStoreOwner?
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
"PUT": [[]],
"PATCH": [[]],
"DELETE": [[]],
} }
def get_queryset(self): def get_queryset(self):

4
apps/locations/views.py
View file

@ -29,7 +29,11 @@ class AddressViewSet(viewsets.ModelViewSet):
serializer_class = AddressSerializer serializer_class = AddressSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
"PUT": [[]],
"PATCH": [[]],
"DELETE": [[]],
} }
def get_queryset(self): def get_queryset(self):

5
apps/orders/views.py
View file

@ -129,7 +129,7 @@ class OrderGroupViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, viewse
serializer_class = OrderGroupSerializer serializer_class = OrderGroupSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"POST": [[]], "GET": [[]],
} }
def get_queryset(self): def get_queryset(self):
@ -145,6 +145,7 @@ class OrderViewSet(mixins.RetrieveModelMixin, viewsets.GenericViewSet):
serializer_class = OrderSerializer serializer_class = OrderSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
} }
@ -171,6 +172,7 @@ class SellerOrderViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, views
# TODO: IsStoreOwner # TODO: IsStoreOwner
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
} }
filterset_fields = ['status'] filterset_fields = ['status']
@ -219,6 +221,7 @@ class NotificationViewSet(mixins.ListModelMixin, mixins.RetrieveModelMixin, view
serializer_class = NotificationSerializer serializer_class = NotificationSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
} }

1
apps/reviews/views.py
View file

@ -38,6 +38,7 @@ class SellerReviewViewSet(mixins.ListModelMixin, viewsets.GenericViewSet):
# TODO: # TODO:
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
} }

5
apps/stores/views.py
View file

@ -72,7 +72,9 @@ class SellerStoreView(APIView):
serializer_class = SellerStoreSerializer serializer_class = SellerStoreSerializer
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"GET": [[]],
"POST": [[]], "POST": [[]],
"PATCH": [[]],
} }
def get(self, request): def get(self, request):
@ -109,7 +111,8 @@ class SellerStoreWorkingHoursView(APIView):
# TODO: # TODO:
permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements] permission_classes = [IsAuthenticatedOrTokenMatchesOASRequirements]
required_alternate_scopes = { required_alternate_scopes = {
"POST": [[]], "GET": [[]],
"PUT": [[]],
} }
def get(self, request): def get(self, request):