Merge pull request #12 from oarepo/mirekys/be-349-enforce-login-requi…

…red-on-user-dashboard-routes

feat: set login guards on dashboard resources

oarepo_dashboard/ui/dashboard_communities/__init__.py

@@ -3,6 +3,7 @@
 )
 from oarepo_ui.resources.resource import RecordsUIResource
 from flask_menu import current_menu
+from flask_login import login_required
 from oarepo_runtime.i18n import lazy_gettext as _
 
 
@@ -25,7 +26,10 @@ def search_endpoint_url(self, identity, api_config, overrides={}, **kwargs):
 
 
 class DashboardCommunitiesUIResource(RecordsUIResource):
-    pass
+
+    decorators = [
+        login_required,
+    ]
 
 
 def create_blueprint(app):

oarepo_dashboard/ui/dashboard_records/__init__.py

@@ -1,5 +1,5 @@
 from flask_menu import current_menu
-from flask_login import current_user
+from flask_login import current_user, login_required
 from oarepo_runtime.i18n import lazy_gettext as _
 from oarepo_global_search.ui.config import (
     GlobalSearchUIResourceConfig,
@@ -32,7 +32,10 @@ def search_endpoint_url(self, identity, api_config, overrides={}, **kwargs):
 
 
 class DashboardRecordsUIResource(GlobalSearchUIResource):
-    pass
+
+    decorators = [
+        login_required,
+    ]
 
 
 def create_blueprint(app):

oarepo_dashboard/ui/dashboard_requests/__init__.py

@@ -3,6 +3,7 @@
 )
 from oarepo_ui.resources.resource import RecordsUIResource
 from flask_menu import current_menu
+from flask_login import login_required
 from oarepo_runtime.i18n import lazy_gettext as _
 from oarepo_dashboard.ui.dashboard_components.search import (
     DashboardRequestsSearchComponent,
@@ -30,7 +31,9 @@ def search_endpoint_url(self, identity, api_config, overrides={}, **kwargs):
 
 
 class DashboardRequestsUIResource(RecordsUIResource):
-    pass
+    decorators = [
+        login_required,
+    ]
 
 
 def create_blueprint(app):

setup.cfg

@@ -1,6 +1,6 @@
 [metadata]
 name = oarepo-dashboard
-version = 1.0.8
+version = 1.0.9
 description = Support for user dashboard (records, communities, requests)
 authors = Mirek Simek <[email protected]>
 readme = README.md