Check methods, with test

gratipay · May 12, 2016 · 5d8c512 · 5d8c512
1 parent e10b9c4
commit 5d8c512
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/tests/py/test_identity_pages.py b/tests/py/test_identity_pages.py
@@ -48,6 +48,9 @@ def test_il_is_200_for_admin(self):
 
     # ip - identity page
 
+    def test_ip_disallows_methods(self):
+        assert self.client.hxt('HEAD', '/~bob/identities/TT').code == 405
+
     def test_ip_is_403_for_anon(self):
         assert self.client.GxT('/~bob/identities/TT').code == 403
 

diff --git a/www/~/%username/identities/%country.spt b/www/~/%username/identities/%country.spt
@@ -2,6 +2,7 @@ from aspen import Response
 from gratipay.utils import get_participant
 from gratipay.models.country import Country
 [---]
+request.allow('GET', 'POST')
 participant = get_participant(state, restrict=True)
 
 # hard-code HR auth group for Team Gratipay O.O