feat: ✨ token permission
This commit is contained in:
parent
b90fa4ae3c
commit
f9683d202f
3 changed files with 18 additions and 1 deletions
11
tJango/permissions.py
Normal file
11
tJango/permissions.py
Normal file
|
@ -0,0 +1,11 @@
|
|||
from rest_framework import permissions
|
||||
from user_token.views import TokenValidation
|
||||
|
||||
|
||||
class IsOwnerOrIsAdminOrHasToken(permissions.BasePermission):
|
||||
def has_permission(self, request, view):
|
||||
token = request.META.get("HTTP_DETECTIVE_TOKEN")
|
||||
is_token_valid = bool(TokenValidation.check_token(token))
|
||||
return (
|
||||
is_token_valid | request.user.is_superuser | request.user.is_authenticated
|
||||
)
|
Loading…
Add table
Add a link
Reference in a new issue