🔒️(api) securing API with LTI token

API was unsecure and anyone could make request to it from a browser. Securing it with a LTI token verification on each endpoint, and to get the `course_id`, the `roles` of the user and its `user_id`.
apui-avignon-university · Jun 3, 2024 · e3acd4e · e3acd4e
1 parent b3b22ba
commit e3acd4e
Show file tree

Hide file tree

Showing 4 changed files with 287 additions and 128 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,10 @@ and this project adheres to
 
 ## Unreleased
 
+### Changed
+
+- Secure API endpoints with LTI token
+
 ## [0.2.0] - 2024-05-23
 
 ### Changed

diff --git a/src/api/plugins/tdbp/tests/conftest.py b/src/api/plugins/tdbp/tests/conftest.py
@@ -6,6 +6,7 @@
 import pytest
 from warren.tests.fixtures.app import http_client
 from warren.tests.fixtures.asynchronous import anyio_backend
+from warren.tests.fixtures.auth import auth_headers
 from warren.tests.fixtures.db import (
     db_engine,
     db_session,