yetangitu/funkwhale
1
0
Fork 0
mirror of https://code.eliotberriot.com/funkwhale/funkwhale.git synced 2025-10-04 07:29:17 +02:00
Code Issues Releases Wiki Activity

Use scoped tokens to load <audio> urls instead of JWT

Browse source
This commit is contained in:
Agate 2020-05-11 10:06:35 +02:00
parent 13d28f7b0c
commit ec8dfdb740
17 changed files with 265 additions and 39 deletions
Download patch file Download diff file Expand all files Collapse all files

4
api/funkwhale_api/users/oauth/permissions.py
View file

@ -77,6 +77,10 @@ class ScopePermission(permissions.BasePermission):
if isinstance(token, models.AccessToken):
return self.has_permission_token(token, required_scope)
elif getattr(request, "scopes", None):
return should_allow(
required_scope=required_scope, request_scopes=set(request.scopes)
)
elif request.user.is_authenticated:
user_scopes = scopes.get_from_permissions(**request.user.get_permissions())
return should_allow(