kobotoolbox / kpi / 24983934715 / 6

82%

master: 76%

push

github

fix(middleware): track v1 endpoint usage for Token-authenticated requests DEV-2025 (#6966)

### 📣 Summary
Move `V1AccessLoggingMiddleware` logic to the response phase to
correctly capture Token-authenticated API usage.

### 📖 Description
The `V1UserTracker` was failing to record activity from programmatic
scripts using Token Authentication. This occurred because Django's
`process_request` runs before the DRF view layer, leaving `request.user`
as `AnonymousUser` during the initial check.

Fix:
- Relocated the tracking logic from `process_request` to
`process_response` within `V1AccessLoggingMiddleware`.
- This ensures that `request.user` is fully populated by DRF's
authentication classes before the logging logic executes.
- Updated the logic to only track successful, authenticated requests to
the defined legacy patterns.

4651 of 11888 branches covered (39.12%)

21658 of 35943 relevant lines covered (60.26%)

0.6 hits per line