Merge branch 'main' of github.com:Jesulayomy/SCHub

Author: Jesulayomy

app/core/urls.py

@@ -26,6 +26,7 @@
     path("schema/", SpectacularAPIView.as_view(), name="api-schema"),
     path("token/", views.UserTokenObtainPairView.as_view(), name="token"),
     path("token/refresh/", TokenRefreshView.as_view(), name="token-refresh"),
+    path("authenticated/", views.authenticated, name="authenticated"),
     path("status/", views.api_status, name="status"),
     path("user-stats/", views.user_stats, name="user_stats"),
     path("users/", views.UserList.as_view(), name="user_list"),

app/core/views.py

@@ -4,7 +4,7 @@
 # from django.views.decorators.csrf import csrf_exempt
 from rest_framework.permissions import (
     # AllowAny,
-    # IsAuthenticated,
+    IsAuthenticated,
     IsAuthenticatedOrReadOnly,
     # IsAdminUser,
 )
@@ -73,6 +73,18 @@ def user_stats(request):
     )
 
 
+@api_view(["GET"])
+@permission_classes([])
+def authenticated(request):
+    """Returns True if user is authenticated"""
+    if request.user.is_authenticated:
+        serialized = UserSerializer(request.user)
+        return Response(
+            {"detail": "User is authenticated", "user": serialized.data}
+        )
+    return Response({"detail": "User is not authenticated", "user": None})
+
+
 class UserTokenObtainPairView(TokenObtainPairView):
     serializer_class = UserTokenObtainPairSerializer
 
@@ -106,7 +118,7 @@ def create(self, request, *args, **kwargs):
 class UserDetail(APIView):
     """User retrieve, update and delete"""
 
-    permission_classes = [IsOwnerOrStaffOrAdminOrReadOnly]
+    permission_classes = [IsAuthenticated, IsOwnerOrStaffOrAdminOrReadOnly]
     serializer_class = UserSerializer
 
     def get(self, request, pk):

app/school/views.py

@@ -69,8 +69,8 @@ def create(self, request, *args, **kwargs):
         self.perform_create(serializer)
 
         data = {
-            "detail": "Course created successfully",
-            "course": serializer.data,
+            "detail": "Department created successfully",
+            "department": serializer.data,
         }
         return Response(data, status=status.HTTP_201_CREATED)
 

app/schub/settings.py

@@ -32,7 +32,7 @@
 # SECURITY WARNING: don't run with debug turned on in production!
 DEBUG = True
 
-ALLOWED_HOSTS = []
+# ALLOWED_HOSTS = []
 
 
 # Application definition
@@ -47,6 +47,7 @@
     "rest_framework",
     "rest_framework.authtoken",
     "rest_framework_simplejwt",
+    "corsheaders",
     "drf_spectacular",
     "core.apps.CoreConfig",
     "school.apps.SchoolConfig",
@@ -55,6 +56,7 @@
 MIDDLEWARE = [
     "django.middleware.security.SecurityMiddleware",
     "django.contrib.sessions.middleware.SessionMiddleware",
+    "corsheaders.middleware.CorsMiddleware",
     "django.middleware.common.CommonMiddleware",
     "django.middleware.csrf.CsrfViewMiddleware",
     "django.contrib.auth.middleware.AuthenticationMiddleware",
@@ -148,7 +150,7 @@
         "rest_framework.permissions.IsAuthenticated",
     ],
     "DEFAULT_PAGINATION_CLASS": "rest_framework.pagination.PageNumberPagination",
-    "PAGE_SIZE": 2,
+    "PAGE_SIZE": 50,
     "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema",
     # 'TOKEN_OBTAIN_SERIALIZER': 'core.serializers.UserTokenObtainPairSerializer',
 }
@@ -169,3 +171,6 @@
     "REFRESH_TOKEN_LIFETIME": timedelta(days=7),
     "AUTH_HEADER_TYPES": ("Token",),
 }
+
+CORS_ALLOWED_ORIGINS = ["http://localhost:3000", "http://localhost:8000"]
+CORS_ALLOW_CREDENTIALS = True