API - update OAuth2 scopes
This commit is contained in:
@ -11,7 +11,7 @@ records_blueprint = Blueprint('records', __name__)
|
||||
|
||||
|
||||
@records_blueprint.route('/records', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_records(auth_user: User) -> Dict:
|
||||
"""
|
||||
Get all records for authenticated user.
|
||||
|
@ -19,7 +19,7 @@ sports_blueprint = Blueprint('sports', __name__)
|
||||
|
||||
|
||||
@sports_blueprint.route('/sports', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_sports(auth_user: User) -> Dict:
|
||||
"""
|
||||
Get all sports
|
||||
@ -195,7 +195,7 @@ def get_sports(auth_user: User) -> Dict:
|
||||
|
||||
|
||||
@sports_blueprint.route('/sports/<int:sport_id>', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_sport(auth_user: User, sport_id: int) -> Union[Dict, HttpResponse]:
|
||||
"""
|
||||
Get a sport
|
||||
@ -304,7 +304,7 @@ def get_sport(auth_user: User, sport_id: int) -> Union[Dict, HttpResponse]:
|
||||
|
||||
|
||||
@sports_blueprint.route('/sports/<int:sport_id>', methods=['PATCH'])
|
||||
@require_auth(scopes='write', as_admin=True)
|
||||
@require_auth(scopes=['workouts:write'], as_admin=True)
|
||||
def update_sport(auth_user: User, sport_id: int) -> Union[Dict, HttpResponse]:
|
||||
"""
|
||||
Update a sport
|
||||
|
@ -174,7 +174,7 @@ def get_workouts(
|
||||
|
||||
|
||||
@stats_blueprint.route('/stats/<user_name>/by_time', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workouts_by_time(
|
||||
auth_user: User, user_name: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -281,7 +281,7 @@ def get_workouts_by_time(
|
||||
|
||||
|
||||
@stats_blueprint.route('/stats/<user_name>/by_sport', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workouts_by_sport(
|
||||
auth_user: User, user_name: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -377,7 +377,7 @@ def get_workouts_by_sport(
|
||||
|
||||
|
||||
@stats_blueprint.route('/stats/all', methods=['GET'])
|
||||
@require_auth(as_admin=True)
|
||||
@require_auth(scopes=['workouts:read'], as_admin=True)
|
||||
def get_application_stats(auth_user: User) -> Dict:
|
||||
"""
|
||||
Get all application statistics
|
||||
|
@ -56,7 +56,7 @@ MAX_WORKOUTS_PER_PAGE = 100
|
||||
|
||||
|
||||
@workouts_blueprint.route('/workouts', methods=['GET'])
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workouts(auth_user: User) -> Union[Dict, HttpResponse]:
|
||||
"""
|
||||
Get workouts for the authenticated user.
|
||||
@ -298,7 +298,7 @@ def get_workouts(auth_user: User) -> Union[Dict, HttpResponse]:
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>', methods=['GET']
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workout(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -462,7 +462,7 @@ def get_workout_data(
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>/gpx', methods=['GET']
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workout_gpx(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -512,7 +512,7 @@ def get_workout_gpx(
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>/chart_data', methods=['GET']
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_workout_chart_data(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -582,7 +582,7 @@ def get_workout_chart_data(
|
||||
'/workouts/<string:workout_short_id>/gpx/segment/<int:segment_id>',
|
||||
methods=['GET'],
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_segment_gpx(
|
||||
auth_user: User, workout_short_id: str, segment_id: int
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -634,7 +634,7 @@ def get_segment_gpx(
|
||||
'<int:segment_id>',
|
||||
methods=['GET'],
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def get_segment_chart_data(
|
||||
auth_user: User, workout_short_id: str, segment_id: int
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -705,7 +705,7 @@ def get_segment_chart_data(
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>/gpx/download', methods=['GET']
|
||||
)
|
||||
@require_auth(scopes='read')
|
||||
@require_auth(scopes=['workouts:read'])
|
||||
def download_workout_gpx(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[HttpResponse, Response]:
|
||||
@ -848,7 +848,7 @@ def get_map_tile(s: str, z: str, x: str, y: str) -> Tuple[Response, int]:
|
||||
|
||||
|
||||
@workouts_blueprint.route('/workouts', methods=['POST'])
|
||||
@require_auth(scopes='write')
|
||||
@require_auth(scopes=['workouts:write'])
|
||||
def post_workout(auth_user: User) -> Union[Tuple[Dict, int], HttpResponse]:
|
||||
"""
|
||||
Post a workout with a gpx file
|
||||
@ -1016,7 +1016,7 @@ def post_workout(auth_user: User) -> Union[Tuple[Dict, int], HttpResponse]:
|
||||
|
||||
|
||||
@workouts_blueprint.route('/workouts/no_gpx', methods=['POST'])
|
||||
@require_auth(scopes='write')
|
||||
@require_auth(scopes=['workouts:write'])
|
||||
def post_workout_no_gpx(
|
||||
auth_user: User,
|
||||
) -> Union[Tuple[Dict, int], HttpResponse]:
|
||||
@ -1165,7 +1165,7 @@ def post_workout_no_gpx(
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>', methods=['PATCH']
|
||||
)
|
||||
@require_auth(scopes='write')
|
||||
@require_auth(scopes=['workouts:write'])
|
||||
def update_workout(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[Dict, HttpResponse]:
|
||||
@ -1313,7 +1313,7 @@ def update_workout(
|
||||
@workouts_blueprint.route(
|
||||
'/workouts/<string:workout_short_id>', methods=['DELETE']
|
||||
)
|
||||
@require_auth(scopes='write')
|
||||
@require_auth(scopes=['workouts:write'])
|
||||
def delete_workout(
|
||||
auth_user: User, workout_short_id: str
|
||||
) -> Union[Tuple[Dict, int], HttpResponse]:
|
||||
|
Reference in New Issue
Block a user