Merge branch 'master' into appdev

[wolnelektury.git] / src / social / api / views.py

diff --git a/src/social/api/views.py b/src/social/api/views.py
index 91d882d..402245d 100644 (file)
--- a/src/social/api/views.py
+++ b/src/social/api/views.py
@@ -2,9 +2,8 @@
 # Copyright © Fundacja Wolne Lektury. See NOTICE for more information.
 #
 from datetime import datetime
 # Copyright © Fundacja Wolne Lektury. See NOTICE for more information.
 #
 from datetime import datetime

-from pytz import utc

 from django.http import Http404
 from django.http import Http404

-from django.utils.timezone import now
+from django.utils.timezone import now, utc

 from rest_framework.generics import ListAPIView, ListCreateAPIView, RetrieveAPIView, RetrieveUpdateAPIView, RetrieveUpdateDestroyAPIView, get_object_or_404
 from rest_framework.permissions import IsAuthenticated, IsAuthenticatedOrReadOnly
 from rest_framework.response import Response
 from rest_framework.generics import ListAPIView, ListCreateAPIView, RetrieveAPIView, RetrieveUpdateAPIView, RetrieveUpdateDestroyAPIView, get_object_or_404
 from rest_framework.permissions import IsAuthenticated, IsAuthenticatedOrReadOnly
 from rest_framework.response import Response


@@ -418,6 +417,8 @@ class SyncView(ListAPIView):
     def post(self, request):
         new_ids = []
         data = request.data
     def post(self, request):
         new_ids = []
         data = request.data

+        if not isinstance(data, list):
+            raise serializers.ValidationError('Payload should be a list')

         for item in data:
             instance = self.get_instance(request.user, item)
             ser = self.get_serializer(
         for item in data:
             instance = self.get_instance(request.user, item)
             ser = self.get_serializer(