|
@@ -1,19 +1,18 @@
|
|
|
-from urllib import response
|
|
|
|
|
from rest_framework import permissions
|
|
from rest_framework import permissions
|
|
|
from .client import get_user_id
|
|
from .client import get_user_id
|
|
|
|
|
|
|
|
|
|
+
|
|
|
class IsOmixomUser(permissions.BasePermission):
|
|
class IsOmixomUser(permissions.BasePermission):
|
|
|
message = 'El token no pertenece a un usuario de Omixom'
|
|
message = 'El token no pertenece a un usuario de Omixom'
|
|
|
|
|
|
|
|
- # TODO: Dar permisos solo si el token pertenece a un usuario de Omixom
|
|
|
|
|
|
|
+ # Determina el usuario al que pertenece el Token de Autorizacion.
|
|
|
|
|
+ # Solo da permisos si el token es valido y en ese caso setea el user_id asociado a ese token.
|
|
|
def has_permission(self, request, view):
|
|
def has_permission(self, request, view):
|
|
|
token = request.META.get('HTTP_AUTHORIZATION')
|
|
token = request.META.get('HTTP_AUTHORIZATION')
|
|
|
response = get_user_id(token)
|
|
response = get_user_id(token)
|
|
|
if response:
|
|
if response:
|
|
|
- #Guardar id de usuario
|
|
|
|
|
request.GET._mutable = True
|
|
request.GET._mutable = True
|
|
|
request.GET['user_id'] = response.json()["user_id"]
|
|
request.GET['user_id'] = response.json()["user_id"]
|
|
|
return response.status_code == 200
|
|
return response.status_code == 200
|
|
|
else:
|
|
else:
|
|
|
return False
|
|
return False
|
|
|
-
|
|
|