sourcehut
/
builds.sr.ht
mirror of https://git.sr.ht/~sircmpwn/builds.sr.ht
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

api/job_by_id_manifest_GET: require oauth

This commit is contained in:
Conrad Hoffmann 2023-12-11 12:57:54 +01:00
parent 16a96a308c
commit 468badf423
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
buildsrht/blueprints/api.py
View File

@ -125,11 +125,12 @@ def artifacts_by_job_id_GET(job_id):
return paginated_response(Artifact.id, artifacts)
@api.route("/api/jobs/<int:job_id>/manifest")
@oauth("jobs:read")
def jobs_by_id_manifest_GET(job_id):
job = Job.query.filter(Job.id == job_id).first()
if not job:
abort(404)
if job.visibility == Visibility.PRIVATE and ((current_token is None) or (job.owner_id != current_token.user_id)):
if job.visibility == Visibility.PRIVATE and job.owner_id != current_token.user_id:
abort(404) # TODO: ACLs
return Response(job.manifest, content_type="text/plain")