csrf remove

.gitignore

@@ -2,3 +2,4 @@
 .vscode/
 .venv/
 .env
+env/*.env

back/api/settings.py

@@ -37,11 +37,13 @@ ALLOWED_HOSTS = [
     "toinv.svs-tech.pro",
 ]
 CORS_ALLOWED_ORIGINS = [
+    "http://localhost",
     "http://localhost:3000",
     "http://192.168.103.159:3000",
     "https://toinv.svs-tech.pro",
 ]
 CSRF_TRUSTED_ORIGINS = [
+    "http://localhost",
     "https://toinv.svs-tech.pro",
 ]
 # Application definition

back/tgbot/views.py

@@ -24,6 +24,8 @@ class TgItemViewSet(viewsets.ModelViewSet):
     queryset = TgItem.objects.all().order_by("-updated_at")
     serializer_class = TgItemSerializer
     http_method_names = ["post", "get", "patch"]
+    permission_classes = ()
+    authentication_classes = ()
     
     def retrieve(self, request, pk=None):
         item = TgItem.objects.get(id=pk)
@@ -50,6 +52,8 @@ class TmcFieldViewset(viewsets.ModelViewSet):
     queryset = TmcField.objects.all()
     serializer_class = TmcFieldSerializer
     http_method_names = ["post", "get", "patch"]
+    permission_classes = ()
+    authentication_classes = ()
     
     def partial_update(self, request, *args, **kwargs):
         return super().partial_update(request)

docker-compose.yml

@@ -13,7 +13,7 @@ services:
       timeout: 3s
       retries: 20
     volumes:
-      - ./.env:/app/.env
+      - ./back/.env:/app/.env
     networks:
       - toinv-network
     image: ci.svs-tech.pro/toinv_back:latest

env/back.env.example

@@ -4,3 +4,6 @@ DB_PASSWORD=
 DB_HOST=
 DB_PORT=
 ODATA_AUTH=
+
+TG_TOKEN=
+NGROK_TEMP=

env/docker.env.example

@@ -0,0 +1 @@
+WEB_PORT=80

env/front.env.example

@@ -0,0 +1 @@
+NUXT_PUBLIC_API_BASE='http://localhost:8000/api'

front/pages/table/[id].vue

@@ -43,10 +43,10 @@ onMounted(async () => {
     loadTer()
 })
 const patchField = async (field) => {
-    await apiCall(`tgbot/items/${field.id}/`, 'PATCH', { text: field.text })
+    await apiCall(`tgbot/items/${field.id}/`, 'patch', { text: field.text })
 }
 const patchItem = async () => {
-    await apiCall(`tgbot/${state.id}/`, 'PATCH', { name: state.name, location: state.location })
+    await apiCall(`tgbot/${state.id}/`, 'patch', { name: state.name, location: state.location })
 }
 </script>
 <template>

readme.md

@@ -3,3 +3,9 @@
 ## DEV
 
 * Как запустить: `./dev.sh`
+
+## Примонтировать энв-файлы
+
+* `ln -s ~/projects/to_inventory/env/docker.env ~/projects/to_inventory/.env`
+* `ln -s ~/projects/to_inventory/env/back.env ~/projects/to_inventory/back/.env`
+* `ln -s ~/projects/to_inventory/env/front.env ~/projects/to_inventory/front/.env`