Zareian
8835e01595
POST /api/auth/session is gone (404). Existing is_guest rows keep refresh and upgrade-by-phone until the demo/guest rows are purged; the code that serves them is listed in docs/security-before-production.md §10. Tests that used the endpoint as a fixture now use accounts/testing.guest_session. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
22 lines
717 B
Python
22 lines
717 B
Python
from django.urls import path
|
|
|
|
from .views import (
|
|
DeleteAccountView,
|
|
LoginView,
|
|
LogoutView,
|
|
RefreshTokenView,
|
|
RequestOTPView,
|
|
SetUserGradeView,
|
|
UserProfileView,
|
|
)
|
|
|
|
urlpatterns = [
|
|
path('auth/otp/request', RequestOTPView.as_view(), name='auth-otp-request'),
|
|
path('auth/login', LoginView.as_view(), name='auth-login'),
|
|
path('auth/refresh', RefreshTokenView.as_view(), name='auth-refresh'),
|
|
path('auth/logout', LogoutView.as_view(), name='auth-logout'),
|
|
path('user/grade', SetUserGradeView.as_view(), name='user-grade'),
|
|
path('user/profile', UserProfileView.as_view(), name='user-profile'),
|
|
path('user/delete', DeleteAccountView.as_view(), name='user-delete'),
|
|
]
|