From 8d0e801d860c685c9b9d878c1a3e73c6c894e4a2 Mon Sep 17 00:00:00 2001 From: Sicherhaven Date: Mon, 6 Apr 2026 22:16:41 +0530 Subject: [PATCH] fix(top-events): remove token gate, add event_status filter and event_type_name TopEventsAPI had AllowAny permission but still called validate_token_and_get_user(), blocking unauthenticated carousel fetches. Also added event_status='published' filter and event_type_name resolution (model_to_dict only returns the FK integer, not the string name). --- mobile_api/views/events.py | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/mobile_api/views/events.py b/mobile_api/views/events.py index bbb9fc2..7b9fedc 100644 --- a/mobile_api/views/events.py +++ b/mobile_api/views/events.py @@ -607,14 +607,11 @@ class TopEventsAPI(APIView): def post(self, request): try: - user, token, data, error_response = validate_token_and_get_user(request) - if error_response: - return error_response - - events = Event.objects.filter(is_top_event=True).order_by('-created_date') + events = Event.objects.filter(is_top_event=True, event_status='published').order_by('-created_date') event_list = [] for e in events: data_dict = model_to_dict(e) + data_dict['event_type_name'] = e.event_type.event_type if e.event_type else '' try: thumb = EventImages.objects.get(event=e.id, is_primary=True) data_dict['thumb_img'] = thumb.event_image.url