Merge pull request #756 from Aiven-Open/fix-referencedby-auth

Fix authentication check with referencedby route
Aiven-Open · Nov 21, 2023 · 190f1af · 190f1af
2 parents e7f6be7 + d9fbe68
commit 190f1af
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/karapace/schema_registry_apis.py b/karapace/schema_registry_apis.py
@@ -291,6 +291,7 @@ def _add_schema_registry_routes(self) -> None:
             callback=self.subject_version_referencedby_get,
             method="GET",
             schema_request=True,
+            auth=self._auth,
         )
         self.route(
             "/subjects/<subject:path>",

diff --git a/tests/integration/test_schema_registry_auth.py b/tests/integration/test_schema_registry_auth.py
@@ -94,6 +94,9 @@ async def test_sr_auth_endpoints(registry_async_client_auth: Client) -> None:
     res = await registry_async_client_auth.get(f"subjects/{quote(subject)}/versions/1/schema")
     assert res.status_code == 401
 
+    res = await registry_async_client_auth.get(f"subjects/{quote(subject)}/versions/1/referencedby")
+    assert res.status_code == 401
+
     res = await registry_async_client_auth.delete(f"subjects/{quote(subject)}")
     assert res.status_code == 401