Hopiu/wagtail
1
0
Fork 0
mirror of https://github.com/Hopiu/wagtail.git synced 2026-03-16 22:10:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Ensure admin API always uses SessionAuthentication backend

Browse source 
Fixes #5585 and (at least partly) #5628
This commit is contained in:
Matt Westcott 2019-10-22 12:38:09 +01:00
parent c4506467b9
commit 605cedca78
2 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
wagtail/admin/api/endpoints.py
View file

@ -1,5 +1,7 @@
from collections import OrderedDict
from rest_framework.authentication import SessionAuthentication
from wagtail.api.v2.endpoints import PagesAPIEndpoint
from wagtail.api.v2.filters import (
ChildOfFilter, DescendantOfFilter, FieldsFilter, ForExplorerFilter, OrderingFilter,
@ -13,6 +15,7 @@ from .serializers import AdminPageSerializer
class PagesAdminAPIEndpoint(PagesAPIEndpoint):
base_serializer_class = AdminPageSerializer
authentication_classes = [SessionAuthentication]
# Use unrestricted child_of/descendant_of filters
# Add has_children filter

10
wagtail/tests/settings.py
View file

@ -220,3 +220,13 @@ WAGTAILADMIN_RICH_TEXT_EDITORS = {
'WIDGET': 'wagtail.tests.testapp.rich_text.CustomRichTextArea'
},
}
# Set a non-standard DEFAULT_AUTHENTICATION_CLASSES value, to verify that the
# admin API still works with session-based auth regardless of this setting
# (see https://github.com/wagtail/wagtail/issues/5585)
REST_FRAMEWORK = {
'DEFAULT_AUTHENTICATION_CLASSES': [
'rest_framework.authentication.BasicAuthentication',
]
}