From 9321961a1163348f3576841f1e2567b3ab77be7b Mon Sep 17 00:00:00 2001 From: Leo Vasanko Date: Sun, 26 Apr 2026 05:46:09 +0000 Subject: [PATCH] sso: use /auth/api/check for token permission checks --- cista/sso.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/cista/sso.py b/cista/sso.py index 3af4491..3484e90 100644 --- a/cista/sso.py +++ b/cista/sso.py @@ -155,6 +155,8 @@ async def validate_sso_request(request, *, perm: str = "cista:login") -> dict | async def check_permissions(user_id: str, perm: str) -> dict: """Check if a Paskia user has the given permission. + Calls /auth/api/check?user=&perm= — no session or cookies needed. + Args: user_id: The Paskia user UUID perm: Permission to check (e.g. cista:login or cista:admin) @@ -170,12 +172,12 @@ async def check_permissions(user_id: str, perm: str) -> dict: raise ValueError("Paskia not enabled") client = await get_client() - url = f"{PASKIA_BACKEND_URL}/auth/api/check-permissions" + url = f"{PASKIA_BACKEND_URL}/auth/api/check" try: - response = await client.post( + response = await client.get( url, - json={"user_id": user_id, "perm": perm}, + params={"user": user_id, "perm": perm}, headers={"accept": "application/json"}, )