secret_permissions.py: new file for HasValidSignature Permission class and supporting method
secret_views.py: view for securely viewing all users with a secret API key. Calls user_serializer with include_group = True and calls permission in secret_permissions.
serializer.py: add serializer for Django.contrib.groups and add include_groups paramter to UserSerializer to optionally include user groups in response
test_secret_api.py: tests secret based API
settings.py: added SECRET_API_KEY
start-local.sh: removed call to loadenv.sh
Why did you make the changes (we will use this info to test)?
See issue #331 and see test_secret_api.py fir tests,
Fixes
331
What changes did you make?
Why did you make the changes (we will use this info to test)?
See issue #331 and see test_secret_api.py fir tests,