ramon
/
skillbox
1
0
Fork 0
Code Issues 1 Pull Requests 1 Packages Projects 1 Releases 1 Wiki Activity

Update middleware & tests

This commit is contained in:
Christian Cueni 2021-05-27 09:52:06 +02:00
parent 3e64d1c51f
commit a2df6ff7bd
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
server/core/tests/test_api.py
View File

@ -16,11 +16,10 @@ class ApiAccessTestCase(TestCase):
def test_graphqlEndpoint_shouldNotBeAccessibleWithoutLogin(self):
c = Client()
response = c.post('/api/graphql/', data=self.query, content_type='application/json')
self.assertEqual(response.status_code, 302)
self.assertEqual(response.url, '/login?next=/api/graphql/')
self.assertEqual(response.status_code, 402)
def test_graphqlEndpoint_shouldBeAccessibleWithLogin(self):
UserFactory(username='admin')
def test_graphqlEndpoint_shouldBeAccessibleForSuperUser(self):
UserFactory(username='admin', is_staff=True, is_active=True, is_superuser=True)
c = Client()
c.login(username='admin', password='test')

3
server/core/utils.py
View File

@ -28,6 +28,9 @@ def is_private_api_call_allowed(user, body):
# logged in users should only be able to access all resources if they have a valid license
# logged in users without valid license have only access to logout, me & coupon mutations
if user.is_superuser:
return True
body_unicode = body.decode('utf-8')
try: