[Bugfix] Login required exempts auth for SSO Flow (#85)

Co-authored-by: Tim Lorsbach <tim@lorsba.ch>
Reviewed-on: enviPath/enviPy#85

epdb/views.py

@@ -8,6 +8,7 @@ from django.http import JsonResponse, HttpResponse, HttpResponseNotAllowed, Http
 from django.shortcuts import render, redirect
 from django.views.decorators.csrf import csrf_exempt
 from envipy_additional_information import NAME_MAPPING
+from oauth2_provider.decorators import protected_resource
 
 from utilities.chem import FormatConverter, IndigoUtils
 from utilities.decorators import package_permission_required
@@ -2220,16 +2221,14 @@ def depict(request):
         return HttpResponseBadRequest()
 
 
-from django.contrib.auth.decorators import login_required
+@protected_resource()
-from django.http import JsonResponse
-
-@login_required
 def userinfo(request):
-    user = request.user
+    user = request.resource_owner
-    return JsonResponse({
+    res = {
         "sub": str(user.uuid),
         "email": user.email,
         "username": user.username,
         "name": user.get_full_name() or user.username,
         "email_verified": user.is_active,
-    })
+    }
+    return JsonResponse(res)