Open apolkingg8 opened 2 years ago
Yes, the user create/edit/delete methods are restricted to Admin currently in the evidence API. The intent was to have a separate non-admin API, but it's not critical. Instead we can change the endpoint to be restricted to people who have made purchases via the dispute API.
The
POST /api/users
in document described asUser SignUp
, but in theusers.py
issummary='Create User (Admin)'
. It fails with 401 when I try it, so I guess there is some auth on this endpoint, but it should not have auth if it's an endpoint for signup.The tests around
/api/users
are blocked by this, and I can't find an example in python tests (looks like this part has no test). Could you take a look @solomondefi-dev ?