From adb30f0fdb57ad427244df86990160d369d874aa Mon Sep 17 00:00:00 2001 From: tjacovich Date: Wed, 31 Dec 2025 11:30:53 -0500 Subject: [PATCH 1/2] Add store-preferences scope to notifications endpoint. --- vault_service/views/user.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/vault_service/views/user.py b/vault_service/views/user.py index 23518bb..f79ec2d 100644 --- a/vault_service/views/user.py +++ b/vault_service/views/user.py @@ -215,7 +215,7 @@ def store_data(): return json.dumps(response_data), 200 -@advertise(scopes=[], rate_limit=[1000, 3600*24]) +@advertise(scopes=['store-preferences'], rate_limit=[1000, 3600*24]) @bp.route('/notifications', methods=['GET', 'POST']) @bp.route('/notifications/', methods=['GET', 'PUT', 'DELETE']) def myads_notifications(myads_id=None): @@ -229,7 +229,7 @@ def myads_notifications(myads_id=None): except Exception as e: return json.dumps({'msg': e.message or e.description}), 400 - user_id = int(headers['X-Api-Uid']) + user_id = int(headers['X-api-uid']) if user_id == current_app.config['BOOTSTRAP_USER_ID']: return json.dumps({'msg': 'Sorry, you can\'t use this service as an anonymous user'}), 400 From 2b634f71ef82ee87db6a91dc6395b980786e98b1 Mon Sep 17 00:00:00 2001 From: tjacovich Date: Mon, 5 Jan 2026 12:03:52 -0500 Subject: [PATCH 2/2] Revert header name change. --- vault_service/views/user.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vault_service/views/user.py b/vault_service/views/user.py index f79ec2d..2e741f6 100644 --- a/vault_service/views/user.py +++ b/vault_service/views/user.py @@ -229,7 +229,7 @@ def myads_notifications(myads_id=None): except Exception as e: return json.dumps({'msg': e.message or e.description}), 400 - user_id = int(headers['X-api-uid']) + user_id = int(headers['X-Api-Uid']) if user_id == current_app.config['BOOTSTRAP_USER_ID']: return json.dumps({'msg': 'Sorry, you can\'t use this service as an anonymous user'}), 400