Enable auth via API Key

membermatters · Oct 22, 2023 · 9e20c81 · 9e20c81
1 parent cc744b1
commit 9e20c81
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 6 deletions.
diff --git a/docs/SPACEDIRECTORY.md b/docs/SPACEDIRECTORY.md
@@ -40,11 +40,7 @@ Let's say you're opening the space and you want to ensure that everyone knows it
 You can do this with the following command:
 
 ```bash
-curl -X POST -d 'username=<myuser>&password=<mypass>' \
-    'https://<your_membermatters_installation/api/token' # Use the output of this command for the next one
-
-
-curl -X POST -H 'Authorization: Token <response from above>' \
+curl -X POST -H 'Authorization: Api-Key <Your API KEY>' \
     -d '{"is_open": true, "message": "Open Night TONIGHT! All Welcome between 1800hrs and 2300hrs"}' \
     https://<your_membermatters_installation>/api/spacedirectory/update
 ```

diff --git a/memberportal/api_spacedirectory/views.py b/memberportal/api_spacedirectory/views.py
@@ -122,7 +122,7 @@ def get(self, request):
 class SpaceDirectoryUpdate(APIView):
     """Allows authenticated users to update the SpaceAPI information"""
 
-    permissions_classes = permissions.IsAuthenticated | HasAPIKey
+    permission_classes = (permissions.IsAdminUser | HasAPIKey,)
 
     def post(self, request):
         # Get the current state of the space