Ben Thorner 1d806d65eb Standardise auth checks for both kinds of API auth ...

Previously "requires_auth" and "requires_admin_auth" had similar
but different ways of checking their keys. This switches them to
use the same checks, with the admin / internal auth passing in a
fake / stub set of "api keys" to check.

Pulling out the logic this way will make it easier to unpick the
tests, so we can focus on testing what's unique to each kind of
API auth and avoid future duplication when we start calling the
"requires_internal_auth" method with other client_ids.

Note that a couple of error messages / response codes have changed
for admin / internal auth. None of these occur in practice, so we
can make them consistent with the behaviour for the public API.

2021-08-03 15:42:39 +01:00

..

__init__.py

…

auth.py

Standardise auth checks for both kinds of API auth

2021-08-03 15:42:39 +01:00