Adjust the api_docs_view permissions #313

Signed-off-by: tdruez <[email protected]>

Author: tdruez

dejacode/urls.py

@@ -10,6 +10,7 @@
 from django.conf.urls import include
 from django.contrib import admin
 from django.contrib.auth import views as auth_views
+from django.contrib.auth.decorators import login_required
 from django.template.loader import render_to_string
 from django.urls import path
 from django.views.defaults import page_not_found
@@ -179,11 +180,8 @@
     public=False,
 )
 
-# TODO: Force login_required on all API documentation URLs.
-# for doc_url in api_docs_urls[0]:
-#     doc_url.callback = login_required(doc_url.callback)
 api_docs_patterns = [
-    path("", api_docs_view.with_ui("redoc", cache_timeout=0), name="docs-index"),
+    path("", login_required(api_docs_view.with_ui("redoc", cache_timeout=0)), name="docs-index"),
 ]
 
 urlpatterns += [

dje/templates/admin/docs/index.html

@@ -19,7 +19,6 @@
 
         {% if code_style %}<style>{{ code_style }}</style>{% endif %}
         <script src="{% static 'rest_framework/js/coreapi-0.1.1.js' %}"></script>
-        <script src="{% url 'api-docs:schema-js' %}"></script>
 
         <script src="{% static 'rest_framework/js/jquery-3.7.1.min.js' %}"></script>
         <script src="{% static 'rest_framework/js/bootstrap.min.js' %}"></script>