Vasanko/cista-storage
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sso: use /auth/api/check for token permission checks

Browse Source
This commit is contained in:
Leo Vasanko
2026-04-26 05:46:09 +00:00
parent 123cb45daa
commit 9321961a11
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cista/sso.py
+5 -3
View File
@@ -155,6 +155,8 @@ async def validate_sso_request(request, *, perm: str = "cista:login") -> dict |
async def check_permissions(user_id: str, perm: str) -> dict: async def check_permissions(user_id: str, perm: str) -> dict:
"""Check if a Paskia user has the given permission. """Check if a Paskia user has the given permission.
Calls /auth/api/check?user=<UUID>&perm=<perm> — no session or cookies needed.
Args: Args:
user_id: The Paskia user UUID user_id: The Paskia user UUID
perm: Permission to check (e.g. cista:login or cista:admin) perm: Permission to check (e.g. cista:login or cista:admin)
@@ -170,12 +172,12 @@ async def check_permissions(user_id: str, perm: str) -> dict:
raise ValueError("Paskia not enabled") raise ValueError("Paskia not enabled")
client = await get_client() client = await get_client()
url = f"{PASKIA_BACKEND_URL}/auth/api/check-permissions" url = f"{PASKIA_BACKEND_URL}/auth/api/check"
try: try:
response = await client.post( response = await client.get(
url, url,
json={"user_id": user_id, "perm": perm}, params={"user": user_id, "perm": perm},
headers={"accept": "application/json"}, headers={"accept": "application/json"},
) )