vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

We were asking for too many parameters for changing the plan, token is not always necessary.

Browse source
This commit is contained in:
yackob03 2013-11-06 23:35:37 -05:00
parent 2b0f3a9ba7
commit babc6fa867
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
endpoints/api.py
View file

@ -1126,7 +1126,7 @@ def subscription_view(stripe_subscription, used_repos):
@app.route('/api/user/plan', methods=['PUT']) @app.route('/api/user/plan', methods=['PUT'])
@api_login_required @api_login_required
@required_json_args('token', 'plan') @required_json_args('plan')
def subscribe_api(): def subscribe_api():
request_data = request.get_json() request_data = request.get_json()
plan = request_data['plan'] plan = request_data['plan']

2
test/test_api_security.py
View file

@ -74,7 +74,7 @@ class TestNoAccess(ApiTestCase):
auth_username = NO_ACCESS_USER auth_username = NO_ACCESS_USER
class TestNoAccess(ApiTestCase): class TestReadAccess(ApiTestCase):
__metaclass__ = SpecTestBuilder __metaclass__ = SpecTestBuilder
spec_func = build_read_access_spec spec_func = build_read_access_spec
auth_username = READ_ACCESS_USER auth_username = READ_ACCESS_USER