make ApiKeyAuth work on non-safe routes

2025-11-10 14:03:12 +00:00 · 2025-11-09 14:52:58 +01:00
parent 2e9e1b6a78
commit 075c6f16ec
7 changed files with 115 additions and 26 deletions
--- a/sas/api.py
+++ b/sas/api.py
@@ -52,7 +52,7 @@ class AlbumController(ControllerBase):
    @route.get(
        "/autocomplete-search",
        response=PaginatedResponseSchema[AlbumAutocompleteSchema],
-        auth=[SessionAuth(), ApiKeyAuth()],
+        auth=[ApiKeyAuth(), SessionAuth()],
        permissions=[CanAccessLookup],
    )
    @paginate(PageNumberPaginationExtra, page_size=50)