Skip to content

Conversation

@peterdudfield
Copy link
Contributor

@peterdudfield peterdudfield commented Jan 6, 2026

Pull Request

Description

  • add a description per route
  • also add a seperate description for authorization

How Has This Been Tested?

  • CI tests
  • ran locally with ukpn
  • ran locally with uk-national

Checklist:

  • My code follows OCF's coding style guidelines
  • I have performed a self-review of my own code
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works
  • I have checked my code and corrected any misspellings

…ions

# Conflicts:
#	src/quartz_api/cmd/main.py
#	src/quartz_api/cmd/server.conf
#	src/quartz_api/internal/middleware/auth.py
@peterdudfield peterdudfield requested review from braddf and devsjc and removed request for devsjc January 6, 2026 17:05
@peterdudfield peterdudfield requested a review from devsjc January 6, 2026 17:09
Copy link
Contributor

@devsjc devsjc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks basically fine, although I feel like the descriptions in each module could be the docstring and then be accessed via the doc attribute still. Is there a reason we haven't done this?

Also, I want to note that the long authentication docstring is only needed because we ask the user to supply their own token. It is very possible and quite easy to have the authorize button run the user through the standard browser authentication oauth flow and get that token for them without having to do any curl commands. Would this be preferable?

@peterdudfield
Copy link
Contributor Author

peterdudfield commented Jan 6, 2026

This looks basically fine, although I feel like the descriptions in each module could be the docstring and then be accessed via the doc attribute still. Is there a reason we haven't done this?

Also, I want to note that the long authentication docstring is only needed because we ask the user to supply their own token. It is very possible and quite easy to have the authorize button run the user through the standard browser authentication oauth flow and get that token for them without having to do any curl commands. Would this be preferable?

Good idea, ill try and move this and use the doc attribute

Yea, happy if we want to change / adapt the auth0 broswers authentication. I didnt know there was a standard one? Perhaps we do that in a separate PR?

@devsjc
Copy link
Contributor

devsjc commented Jan 6, 2026

Yeah we can do it with a different PR. I think we just have to use the OAuth2AuthorizationCodeBearer instead of the HTTP bearer.

@peterdudfield
Copy link
Contributor Author

Yeah we can do it with a different PR. I think we just have to use the OAuth2AuthorizationCodeBearer instead of the HTTP bearer.

I think we can even do both, but for a different PR

@peterdudfield
Copy link
Contributor Author

Ive now used doc for the individual routes. So I think its ready @devsjc

@peterdudfield peterdudfield merged commit 168c9b2 into main Jan 7, 2026
8 checks passed
@peterdudfield peterdudfield deleted the descriptions branch January 7, 2026 12:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants