From d907af3c5322bbbea2661e3383c61502ba46bc2a Mon Sep 17 00:00:00 2001 From: David Haynes Date: Tue, 25 Sep 2018 17:24:03 -0400 Subject: [PATCH] PoC with using tokens for API request - woo --- go/go_ahead/src/GolinksList.jsx | 7 ++++++- go/go_back/views.py | 2 ++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/go/go_ahead/src/GolinksList.jsx b/go/go_ahead/src/GolinksList.jsx index 60b6abd..15c5748 100644 --- a/go/go_ahead/src/GolinksList.jsx +++ b/go/go_ahead/src/GolinksList.jsx @@ -13,7 +13,12 @@ class GolinksList extends React.Component { componentDidMount() { if (window.django.user.is_authenticated == "True") { - fetch("/api/golinks") + fetch("/api/golinks/", { + headers: { + "Content-Type": "application/json; charset=utf-8", + Authorization: "Token {props.token}" + } + }) .then(res => res.json()) .then( result => { diff --git a/go/go_back/views.py b/go/go_back/views.py index 0220237..103c1f9 100644 --- a/go/go_back/views.py +++ b/go/go_back/views.py @@ -28,6 +28,7 @@ from .models import URL, RegisteredUser from django.contrib.auth.models import User, Group from rest_framework import viewsets from rest_framework import permissions +from rest_framework.authentication import TokenAuthentication from .serializers import URLSerializer class URLPermission(permissions.BasePermission): @@ -42,6 +43,7 @@ class URLViewSet(viewsets.ModelViewSet): """ API endpoint that handles creation/read/update/deletion of URL objects. """ + authentication_classes = (TokenAuthentication, ) serializer_class = URLSerializer permission_classes = (URLPermission,) lookup_field = 'short' -- GitLab