from urllib import response from rest_framework import permissions from .client import get_user_id class IsOmixomUser(permissions.BasePermission): message = 'El token no pertenece a un usuario de Omixom' # TODO: Dar permisos solo si el token pertenece a un usuario de Omixom def has_permission(self, request, view): token = request.META.get('HTTP_AUTHORIZATION') response = get_user_id(token) if response: #Guardar id de usuario request.GET._mutable = True request.GET['user_id'] = response.json()["user_id"] return response.status_code == 200 else: return False