sanspie/akarpov
1
1
Fork 0
mirror of https://github.com/Alexander-D-Karpov/akarpov synced 2025-02-21 14:50:35 +03:00
Code Issues Packages Projects Releases Wiki Activity

bug fixes

Browse Source
This commit is contained in:
Alexander Karpov 2024-04-07 22:51:32 +03:00
parent 2cce8813e9
commit 06afed5882
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
akarpov/music/api/views.py
View File

@ -30,6 +30,7 @@
) )
from akarpov.music.services.search import search_song from akarpov.music.services.search import search_song
from akarpov.music.tasks import listen_to_song from akarpov.music.tasks import listen_to_song
from akarpov.users.models import User
class LikedSongsContextMixin(generics.GenericAPIView): class LikedSongsContextMixin(generics.GenericAPIView):
@ -394,9 +395,18 @@ def post(self, request, *args, **kwargs):
data = serializer.validated_data data = serializer.validated_data
try: try:
song = Song.objects.cache().get(slug=data["song"]) song = Song.objects.cache().get(slug=self.request.data.get("slug", ""))
except Song.DoesNotExist: except Song.DoesNotExist:
return Response(status=404) return Response(status=404)
try:
user_id = data.get("user_id", None)
user = User.objects.get(id=user_id)
if user != self.request.user:
return Response(status=403)
except User.DoesNotExist:
...
if self.request.user.is_authenticated: if self.request.user.is_authenticated:
listen_to_song.apply_async( listen_to_song.apply_async(
kwargs={ kwargs={