rero / sonar / 30822499532

95%

master: 95%

push

github

fix(api): unregister the Flask-Security views from the API

The Flask-Security blueprint was registered on both applications
(ACCOUNTS_REGISTER_BLUEPRINT) so that `url_for_security` could build the reset
password links sent by email. Its views render SONAR templates, which are only
registered on the UI application, so requesting them through `/api` raised a
`TemplateNotFound` error (500), e.g. on `/api/login/`. The links themselves had
to be patched in the email templates, as they carried the `/api` prefix of the
request they were built in.

* Removes `ACCOUNTS_REGISTER_BLUEPRINT` to restore the invenio defaults: the
  views are registered on the UI application only, and the API application
  keeps the blueprints needed to render the Flask-Security emails.
* Builds the reset password link with `default_reset_password_link_func`, which
  points to the UI application through `ACCOUNTS_REST_RESET_PASSWORD_ENDPOINT`,
  whichever application generates it.
* Removes the `/api` substitution from the email templates.
* Logs out through the REST endpoint in the API tests, as the Flask-Security
  views are no longer available there.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-Authored-by: Pascal Repond <pascal.repond@rero.ch>

4 of 4 new or added lines in 1 file covered. (100.0%)

7313 of 7737 relevant lines covered (94.52%)

0.95 hits per line