Refactor API views a bit for sake of running as separate service
also add "proper" (sic) permission checks
This commit is contained in:
parent
9b61b05155
commit
fec8ba28e2
5 changed files with 35 additions and 15 deletions
|
@ -91,15 +91,15 @@ class AuthenticationView(APIView):
|
|||
def defaults(cls, config):
|
||||
|
||||
# session
|
||||
config.add_route('api.session', '/api/session', request_method='GET')
|
||||
config.add_route('api.session', '/session', request_method='GET')
|
||||
config.add_view(cls, attr='check_session', route_name='api.session', renderer='json')
|
||||
|
||||
# login
|
||||
config.add_route('api.login', '/api/login', request_method=('OPTIONS', 'POST'))
|
||||
config.add_route('api.login', '/login', request_method=('OPTIONS', 'POST'))
|
||||
config.add_view(cls, attr='login', route_name='api.login', renderer='json')
|
||||
|
||||
# logout
|
||||
config.add_route('api.logout', '/api/logout', request_method=('OPTIONS', 'POST'))
|
||||
config.add_route('api.logout', '/logout', request_method=('OPTIONS', 'POST'))
|
||||
config.add_view(cls, attr='logout', route_name='api.logout', renderer='json')
|
||||
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue