投稿や更新の制限を解除
This commit is contained in:
11
app.py
11
app.py
@@ -299,7 +299,6 @@ def route_admin_songs_new():
|
||||
|
||||
|
||||
@app.route(basedir + 'admin/songs/new', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@admin_required(level=100)
|
||||
def route_admin_songs_new_post():
|
||||
output = {'title_lang': {}, 'subtitle_lang': {}, 'courses': {}}
|
||||
@@ -352,7 +351,6 @@ def route_admin_songs_new_post():
|
||||
|
||||
|
||||
@app.route(basedir + 'admin/songs/<int:id>', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@admin_required(level=50)
|
||||
def route_admin_songs_id_post(id):
|
||||
song = db.songs.find_one({'id': id})
|
||||
@@ -427,7 +425,6 @@ def route_admin_users():
|
||||
|
||||
|
||||
@app.route(basedir + 'admin/users', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@admin_required(level=50)
|
||||
def route_admin_users_post():
|
||||
admin_name = session.get('username')
|
||||
@@ -522,7 +519,6 @@ def route_api_config():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/register', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
def route_api_register():
|
||||
data = request.get_json()
|
||||
if not schema.validate(data, schema.register):
|
||||
@@ -564,7 +560,6 @@ def route_api_register():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/login', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
def route_api_login():
|
||||
data = request.get_json()
|
||||
if not schema.validate(data, schema.login):
|
||||
@@ -592,7 +587,6 @@ def route_api_login():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/logout', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@login_required
|
||||
def route_api_logout():
|
||||
session.clear()
|
||||
@@ -600,7 +594,6 @@ def route_api_logout():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/account/display_name', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@login_required
|
||||
def route_api_account_display_name():
|
||||
data = request.get_json()
|
||||
@@ -621,7 +614,6 @@ def route_api_account_display_name():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/account/don', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@login_required
|
||||
def route_api_account_don():
|
||||
data = request.get_json()
|
||||
@@ -647,7 +639,6 @@ def route_api_account_don():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/account/password', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@login_required
|
||||
def route_api_account_password():
|
||||
data = request.get_json()
|
||||
@@ -696,7 +687,6 @@ def route_api_account_remove():
|
||||
|
||||
|
||||
@app.route(basedir + 'api/scores/save', methods=['POST'])
|
||||
@limiter.limit("4 per hour")
|
||||
@login_required
|
||||
def route_api_scores_save():
|
||||
data = request.get_json()
|
||||
@@ -808,7 +798,6 @@ def send_upload(ref):
|
||||
return cache_wrap(flask.send_from_directory("public/upload", ref), 3600)
|
||||
|
||||
@app.route("/api/upload", methods=["POST"])
|
||||
@limiter.limit("4 per hour")
|
||||
def upload_file():
|
||||
try:
|
||||
# POSTリクエストにファイルの部分がない場合
|
||||
|
||||
Reference in New Issue
Block a user