remove verify to auth pod
All checks were successful
Build And Test / build-and-push (push) Successful in 2m40s
All checks were successful
Build And Test / build-and-push (push) Successful in 2m40s
This commit is contained in:
@ -4,7 +4,7 @@ from rest_framework import generics, permissions
|
|||||||
from rest_framework.exceptions import PermissionDenied
|
from rest_framework.exceptions import PermissionDenied
|
||||||
from .models import Post
|
from .models import Post
|
||||||
from .serializers import PostSerializer
|
from .serializers import PostSerializer
|
||||||
from .utils import verify_token_with_auth_server
|
# from .utils import verify_token_with_auth_server
|
||||||
import logging # 2025-04-29
|
import logging # 2025-04-29
|
||||||
|
|
||||||
logger = logging.getLogger(__name__) # 2025-04-29
|
logger = logging.getLogger(__name__) # 2025-04-29
|
||||||
@ -20,14 +20,14 @@ class PostListCreateView(generics.ListCreateAPIView):
|
|||||||
permission_classes = [permissions.IsAuthenticated]
|
permission_classes = [permissions.IsAuthenticated]
|
||||||
|
|
||||||
def perform_create(self, serializer):
|
def perform_create(self, serializer):
|
||||||
token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
# token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
||||||
verify_token_with_auth_server(token)
|
# verify_token_with_auth_server(token)
|
||||||
verify_result = verify_token_with_auth_server(token)
|
# verify_result = verify_token_with_auth_server(token)
|
||||||
# 2025-04-14 로그 등록 (콘솔+FluentBit용)
|
# 2025-04-14 로그 등록 (콘솔+FluentBit용)
|
||||||
if verify_result == None:
|
# if verify_result == None:
|
||||||
logger.info(f"Token verified")
|
# logger.info(f"Token verified")
|
||||||
else:
|
# else:
|
||||||
logger.info(f"Token error")
|
# logger.info(f"Token error")
|
||||||
|
|
||||||
serializer.save(author_name=self.request.user.username)
|
serializer.save(author_name=self.request.user.username)
|
||||||
post_title=serializer.save(author_name=self.request.user.username)
|
post_title=serializer.save(author_name=self.request.user.username)
|
||||||
@ -44,8 +44,8 @@ class PostDetailView(generics.RetrieveUpdateDestroyAPIView):
|
|||||||
return [permissions.AllowAny()]
|
return [permissions.AllowAny()]
|
||||||
|
|
||||||
def perform_update(self, serializer):
|
def perform_update(self, serializer):
|
||||||
token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
# token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
||||||
verify_token_with_auth_server(token)
|
# verify_token_with_auth_server(token)
|
||||||
|
|
||||||
if serializer.instance.author_name != self.request.user.username:
|
if serializer.instance.author_name != self.request.user.username:
|
||||||
raise PermissionDenied("작성자만 수정할 수 있습니다.")
|
raise PermissionDenied("작성자만 수정할 수 있습니다.")
|
||||||
@ -54,8 +54,8 @@ class PostDetailView(generics.RetrieveUpdateDestroyAPIView):
|
|||||||
logger.info(f"Post titled '{post_title}' has been updated.")
|
logger.info(f"Post titled '{post_title}' has been updated.")
|
||||||
|
|
||||||
def perform_destroy(self, instance):
|
def perform_destroy(self, instance):
|
||||||
token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
# token = self.request.headers.get("Authorization", "").replace("Bearer ", "")
|
||||||
verify_token_with_auth_server(token)
|
# verify_token_with_auth_server(token)
|
||||||
|
|
||||||
if instance.author_name != self.request.user.username:
|
if instance.author_name != self.request.user.username:
|
||||||
raise PermissionDenied("작성자만 삭제할 수 있습니다.")
|
raise PermissionDenied("작성자만 삭제할 수 있습니다.")
|
||||||
|
Reference in New Issue
Block a user