cvg/altin
1
0
Fork 0
mirror of https://github.com/ConnorGadbois/altin.git synced 2026-10-21 20:46:17 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fixed auth for user api routes

Browse Source
This commit is contained in:
connorgadbois 2026-09-28 21:27:11 -05:00
parent 74df04ce5a
commit 1852ed73ba
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/altin/management_routes.py
View File

@ -255,6 +255,7 @@ def delete_key():
# Users # Users
@management_routes.route('/api/users', methods=['GET']) @management_routes.route('/api/users', methods=['GET'])
@login_required
def get_users(): def get_users():
users = [] users = []
for user in User.select(): for user in User.select():
@ -263,6 +264,7 @@ def get_users():
return(jsonify({'users': users}), 200) return(jsonify({'users': users}), 200)
@management_routes.route('/api/users', methods=['POST']) @management_routes.route('/api/users', methods=['POST'])
@login_required
def create_user(): def create_user():
if 'username' not in request.json or 'password' not in request.json or 'admin' not in request.json: if 'username' not in request.json or 'password' not in request.json or 'admin' not in request.json:
return(jsonify({'message': 'Invalid request'}), 400) return(jsonify({'message': 'Invalid request'}), 400)
@ -282,6 +284,7 @@ def create_user():
return(jsonify({'message': 'Success'}), 200) return(jsonify({'message': 'Success'}), 200)
@management_routes.route('/api/users', methods=['PATCH']) @management_routes.route('/api/users', methods=['PATCH'])
@login_required
def edit_user(): def edit_user():
if 'id' not in request.json: if 'id' not in request.json:
return(jsonify({'message': 'Invalid request'}), 400) return(jsonify({'message': 'Invalid request'}), 400)
@ -302,6 +305,7 @@ def edit_user():
return(jsonify({'message': 'User updated'}), 200) return(jsonify({'message': 'User updated'}), 200)
@management_routes.route('/api/users', methods=['DELETE']) @management_routes.route('/api/users', methods=['DELETE'])
@login_required
def delete_user(): def delete_user():
if 'id' not in request.json: if 'id' not in request.json:
return(jsonify({'message': 'Invalid request'}), 400) return(jsonify({'message': 'Invalid request'}), 400)