Validate API create requests using serializer

cyverse · Aug 24, 2018 · 6514f37 · 6514f37
1 parent 851bcb5
commit 6514f37
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/api/v2/serializers/details/access_token.py b/api/v2/serializers/details/access_token.py
@@ -8,3 +8,8 @@ class AccessTokenSerializer(serializers.ModelSerializer):
     class Meta:
         model = AccessToken
         fields = ('name', 'id')
+
+    def validate(self, data):
+        name = data.get('name', None)
+        if name and type(name) != unicode:
+            raise Exception("Name must be a unicode string, not {}".format(type(name)))
diff --git a/api/v2/views/access_token.py b/api/v2/views/access_token.py
@@ -22,6 +22,7 @@ def get_queryset(self):
         return AccessToken.objects.filter(token__user=self.request.user)
 
     def create(self, request):
+        AccessTokenSerializer().validate(request.data)
         name = request.data.get('name', None)
         user = request.user
         access_token = create_access_token(user, name, issuer="Personal-Access-Token")