From 0e40040729c251daed5c39743e41aab58aa2fe5e Mon Sep 17 00:00:00 2001
From: Yamozha <yyamozha@gmail.com>
Date: Thu, 1 Apr 2021 01:43:46 +0300
Subject: [PATCH] You can now log in to the website by sending a POST request
 to /api_login/, and then using that token while getting /api/balance or
 /api/images

---
 .../api/__pycache__/views.cpython-38.pyc      | Bin 915 -> 1324 bytes
 reValuate/api/views.py                        |  20 ++++++++++++------
 2 files changed, 14 insertions(+), 6 deletions(-)

diff --git a/reValuate/api/__pycache__/views.cpython-38.pyc b/reValuate/api/__pycache__/views.cpython-38.pyc
index 5b4a555f130ebdfe3efbda7fabbf15c16c92eea4..7dcd940ef8bd47d4a1a0968502f495ab3b77383b 100644
GIT binary patch
literal 1324
zcmbtUOK%e~5Vkj)-A%H2G%bDbzUGo3#1SDL2gIR05YdA#i&?wr20I(<4OJ^{RN}-B
z>0k1dQ~yFQFtbU?Qi%&#@~834#Gd)S*}QAFn*`RkEAjrPN5~I6RF@Bj=dkTLfFOb@
zqA8==W1g<Dn)aDb(eJ6c4p^W=7MACligbfDO50aW-D0iMuB%wLSsUy?gsP*vtgCyh
zN6Bj<BGEV}q9MKM#@8C_gQqE4;AyQqn<5^QLHiOaAp_q9w&2CWy6AHzPpmAg>+nT!
zEN4ZQ@*>M;t~HlNXV!vk2cC=gJWDXy1w6%s0d>(^Y3C4@V23Zc;<FUZ`o0tyzoht*
z=QdV>u{0T1*_kx1`$qGLTsu-Ms=9#8C2<eIkc3e|m?vvfe?nPZ1}qd*c;|#gq6SU*
zuC;pO5b8_u-Rp&R4fZS8whvH{DV=&>$P_LU^gA7s3-17G_7_%~LESVU$A$TasZ4>B
z;3!iC6dW4)X(4T4dJw*VY%A5#1u@%jyc&*<b1g>`KASvw{Agt4Ay*4t$chErjY^`2
z^HUd3WRbvi<`j5u!wnYOCG>2!(#5cvbTDYRC`o2q%Or8lB+<E8D751QZsKYgF?F~G
z$h9xlN=o7SYax?VaciYDF=qCl<&`AMfY}9i*;EB~(ANP#YHR=y(TMt9>HBZx8s#Yb
zi*BY1rGR4i37QQA)YohxpiE{90To(8*#|aw3-&eT+rOW`Nx0d=U*1NzgMi$cy9oCX
zP&acQ;jf%MfGE~g<qUlXgDuxFFipvk0Yy)8^U>f07#viC{~6_DZ12yUp^#~Ac##`x
zPz4hLxSbnGa4f$_6G4>4IMsFt<06$UXPdPbbCq*(?L+olYdr|d(J0$v@jm_zwHeEz
kl-pqa6;4ZbkysZ!UC!h){NgN*%P#HF*o$dQdtN{K1&!J@H2?qr

literal 915
zcmbtSJ&zMH5VdzV`@Q)%KnVUpngk(AgibVw;;ta#3O9?1O-Qh_IeVAmkf`8?K*`^s
zbW3$DB^5JHxCBIpSAKdkBhSv8ndeoN6F48f@fSZRA>YwBJP{bjaP2z)K?GGqQ$}^b
z0*ZE^LLITl^HBA4%wo?YmFSeEp7&IybCv^-MWPB_vQk&9qT~q?smMMNk;!1y{}{3X
zcydvIr`UOhqMVU&bp?MX<G{tX<!xtO`gSQVtZeO=x|DC0HQLCZNxNy*Rsv5RbH&$l
zq`ea<mi!6?Vv^A=Fq3A<)$+YGZtzs|h1@&l_`kywfN>1h-UX0^Q9)QB!&UUT_l2-n
zCM*>cDh*t*%YFtGosKh?*7cfeS=TPFYu$)WAusFtyyI#cF)<`{N%L|g=dE=iSIVX5
zoivvq(PS7L+UsKLx#HG-CFTYMJp7zYUpHD#7ks^VaR1)a$TO}w-pT_8O`7_qO*WUN
zfR`y;i{njcPQB+pL}$K#JISWR!YYJ5LV_?r7$S@iaO=zw!nKMmyNSMA0GMQ7A9_y5
zBiA?5w)HCm9ldDG8-sH(AppDcXJjJeyfM6Oj5Vmz-To^Mrr#9P!`Ed84Ym`Qk5tyr
zgH_!|HC+7mp$b>*$6)<nybxBN;5(E*gMndpy@Y>hbLqqF5<J3fwAi2_EqC8AIEsD&
D-i6ss

diff --git a/reValuate/api/views.py b/reValuate/api/views.py
index 1abd34cf..e85abf79 100644
--- a/reValuate/api/views.py
+++ b/reValuate/api/views.py
@@ -1,15 +1,23 @@
-from rest_framework import status, viewsets
-from rest_framework.decorators import api_view
+from rest_framework import status, viewsets, authentication, permissions
+from rest_framework.decorators import api_view, action
 from rest_framework.response import Response
+
 from users.models import Balance
 from upload.models import Media
 from .serializers import BalanceSerializer, ImageSerializer
 
 class BalanceView(viewsets.ModelViewSet):
-    queryset = Balance.objects.all()
+    permission_classes = [permissions.IsAuthenticated]
     serializer_class = BalanceSerializer
 
-class ImageView(viewsets.ModelViewSet):
-    queryset = Media.objects.all()
-    serializer_class = ImageSerializer
+    def get_queryset(self):
+        return Balance.objects.filter(user=self.request.user)
+    
 
+class ImageView(viewsets.ModelViewSet):
+    permission_classes = [permissions.IsAuthenticated]
+    serializer_class = ImageSerializer
+    
+    def get_queryset(self):
+        return Media.objects.filter(user=self.request.user)
+