fix: allow unauthenticated access to SD poster proxy endpoint

ProgramViewSet.get_permissions() was falling through to Authenticated()
for the poster action since it wasn't in permission_classes_by_action.
Add explicit AllowAny check for the poster action.
This commit is contained in:
Shokkstokk 2026-06-05 00:12:17 +00:00
parent 7c91508f3c
commit aa9e78f858

View file

@ -471,6 +471,8 @@ class ProgramViewSet(viewsets.ModelViewSet):
_sd_poster_error_cache: dict = {}
def get_permissions(self):
if self.action == 'poster':
return [AllowAny()]
try:
return [perm() for perm in permission_classes_by_action[self.action]]
except KeyError: