adds basicauth middleware and allows api

DemocracyClub · Oct 1, 2024 · 72ca1d9 · 72ca1d9
1 parent 7051255
commit 72ca1d9
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/ynr/settings/base.py b/ynr/settings/base.py
@@ -172,6 +172,7 @@ def root(*path):
     "django.middleware.clickjacking.XFrameOptionsMiddleware",
     "candidates.middleware.DisableCachingForAuthenticatedUsers",
     "wombles.middleware.CheckProfileDetailsMiddleware",
+    "dc_utils.middleware.BasicAuthMiddleware",
 )
 
 AUTHENTICATION_BACKENDS = (
@@ -501,3 +502,9 @@ def _is_running_tests():
     from .testing import *  # noqa
 else:
     RUNNING_TESTS = False
+
+# Allowlist of URLs that should be ignored by dc_utils BasicAuthMiddleware
+BASIC_AUTH_ALLOWLIST = [
+    "/api",
+    "/api/*",
+]