cardo-python-utils 0.5.dev14__tar.gz → 0.5.dev15__tar.gz

{cardo_python_utils-0.5.dev14/cardo_python_utils.egg-info → cardo_python_utils-0.5.dev15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev14
+Version: 0.5.dev15
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev14 → cardo_python_utils-0.5.dev15/cardo_python_utils.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev14
+Version: 0.5.dev15
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT

{cardo_python_utils-0.5.dev14 → cardo_python_utils-0.5.dev15}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cardo-python-utils"
-version = "0.5.dev14"
+version = "0.5.dev15"
 description = "Python library enhanced with a wide range of functions for different scenarios."
 readme = "README.rst"
 requires-python = ">=3.8"

{cardo_python_utils-0.5.dev14 → cardo_python_utils-0.5.dev15}/python_utils/django/keycloak/api/drf.py

@@ -42,18 +42,32 @@ class HasScope(BasePermission):
         allowed_scopes = ["jobs"]
         ...
 
+    It is possible to define different scopes per HTTP method 
+    by setting `allowed_scopes` as a dict:
+    
+    class MyApiView(APIView):
+        permission_classes = [IsAuthenticated, HasScope]
+        allowed_scopes = {
+            "get": ["jobs"],
+            "post": ["jobs_admin"],
+        }
+        ...
+
     If no particular scope is required, you can set `allowed_scopes = "*"`
         to allow access without scope checks.
     """
 
     def has_permission(self, request, view):
-        allowed_scopes = getattr(view, "allowed_scopes", [])
+        allowed_scopes = getattr(view, "allowed_scopes", None)
 
         if not allowed_scopes:
             raise Exception(
                 f"No allowed_scopes defined on the view '{view.__class__.__name__}'. "
                 "Define allowed_scopes or set it to '*' to allow any scope."
             )
+        
+        if isinstance(allowed_scopes, dict):
+            allowed_scopes = allowed_scopes.get(request.method.lower(), [])
 
         if allowed_scopes == "*":
             return True