Modify: disable basic auth in API add protection to storage info endpoint

This commit is contained in:
Stepan Zhukovsky 2023-09-08 19:34:25 +09:00
parent bfe13039a3
commit 305001c9ab
2 changed files with 4 additions and 1 deletions

View File

@ -163,6 +163,9 @@ class TicketViewSet(viewsets.ModelViewSet):
class StorageInfo(views.APIView):
"""Info about storage total/used/free space"""
permission_classes = (IsAuthenticated, )
@extend_schema(
responses=StorageInfoSerializer,
summary='Show storage space in bytes'

View File

@ -178,7 +178,7 @@ REST_FRAMEWORK = {
'DEFAULT_AUTHENTICATION_CLASSES': [
'rest_framework_simplejwt.authentication.JWTAuthentication',
'rest_framework.authentication.SessionAuthentication',
'rest_framework.authentication.BasicAuthentication'
# 'rest_framework.authentication.BasicAuthentication'
],
'DEFAULT_FILTER_BACKENDS': ['django_filters.rest_framework.DjangoFilterBackend', ], # noqa:E501
'DEFAULT_SCHEMA_CLASS': 'drf_spectacular.openapi.AutoSchema',