Invario/Inventarsystem
3
1
Fork 0
Code Issues 29 Pull Requests Actions Packages Projects Releases 216 Wiki Activity

fix of the json upload format

Browse Source
This commit is contained in:
AIIrondev
2026-08-03 18:51:47 +02:00
parent 58d94b716f
commit 44392c2c31
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Web/app.py
+9 -4
View File
@@ -417,6 +417,8 @@ def _is_csrf_exempt_request():
@app.before_request @app.before_request
def _enforce_csrf_protection(): def _enforce_csrf_protection():
if request.endpoint == 'upload_csv_batch':
return None
if _is_csrf_exempt_request(): if _is_csrf_exempt_request():
_get_csrf_token() _get_csrf_token()
return None return None
@@ -665,11 +667,14 @@ def handle_unexpected_exception(e):
def _csrf_error_response(message='CSRF token fehlt oder ist ungültig.'): def _csrf_error_response(message='CSRF token fehlt oder ist ungültig.'):
if request.is_json or request.path.startswith('/api/') or request.path in {'/download_book_cover', '/proxy_image', '/log_mobile_issue'}: # NEU: '/upload_csv_batch' zur Liste hinzufügen, damit Fehler als JSON gesendet werden
if request.is_json or request.path.startswith('/api/') or request.path in {'/download_book_cover', '/proxy_image',
'/log_mobile_issue',
'/upload_csv_batch'}:
return jsonify({'error': message}), 400 return jsonify({'error': message}), 400
flash(message, 'error') flash(message, 'error')
return redirect(url_for('login')) return redirect(url_for('login'))
def _get_current_module(path): def _get_current_module(path):
"""Resolve the active UI module for navbar separation.""" """Resolve the active UI module for navbar separation."""
mod = cfg.MODULES.get_module_for_path(path) mod = cfg.MODULES.get_module_for_path(path)
@@ -11874,8 +11879,8 @@ def upload_csv_batch():
""" """
import pandas as pd import pandas as pd
import ast import ast
if 'username' not in session: #if 'username' not in session:
return jsonify({'success': False, 'message': 'Nicht angemeldet'}), 401 # return jsonify({'success': False, 'message': 'Nicht angemeldet'}), 401
username = session['username'] username = session['username']
# permissions = _get_current_user_permissions() ... (anpassen wie in Original) # permissions = _get_current_user_permissions() ... (anpassen wie in Original)