redid the api a bit so that nothing was using open security - added a new endpoint for getting a workflow spec that uses the alternate API_TOKEN security and leave the original endpoint as it was.

crc/api.yml

@@ -156,6 +156,29 @@ paths:
                 items:
                   $ref: "#/components/schemas/WorkflowSpecDiffList"
 
+  /workflow_sync/{workflow_spec_id}/spec:
+    parameters:
+      - name: workflow_spec_id
+        in: path
+        required: false
+        description: The unique id of an existing workflow specification to modify.
+        schema:
+          type: string
+    get:
+      operationId: crc.api.workflow_sync.get_sync_workflow_specification
+      summary: Returns a single workflow specification
+      security:
+        - ApiKeyAuth: []
+      tags:
+        - Workflow Sync API
+      responses:
+        '200':
+          description: Workflow specification.
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/WorkflowSpec"
+
 
   /workflow_sync/{workflow_spec_id}/files:
     get:
@@ -401,7 +424,6 @@ paths:
     get:
       operationId: crc.api.workflow.get_workflow_specification
       summary: Returns a single workflow specification
-      security: []
       tags:
         - Workflow Specifications
       responses:

crc/api/workflow_sync.py

@@ -8,8 +8,12 @@ from crc.models.file import FileModel, FileDataModel
 from crc.models.workflow import WorkflowSpecModel, WorkflowSpecCategoryModel
 from crc.services.file_service import FileService
 from crc.services.workflow_sync import WorkflowSyncService
+from crc.api.workflow import get_workflow_specification
 
 
+def get_sync_workflow_specification(workflow_spec_id):
+    return get_workflow_specification(workflow_spec_id)
+
 def join_uuids(uuids):
     """Joins a pandas Series of uuids and combines them in one hash"""
     combined_uuids = ''.join([str(uuid) for uuid in uuids.sort_values()]) # ensure that values are always

crc/services/workflow_sync.py

@@ -25,13 +25,8 @@ class WorkflowSyncService(object):
         """
         this just gets the details of a workflow spec from the
         remote side.
-
-        FIXME: for testing I had changed the security on the API endpoint
-        below so that I could run it - I need to restore the security on this
-        and make a new workflow_sync endpoint that just calls this same function
-        so that I can use the API_TOKEN rather than the other token setup
         """
-        url = remote+'/v1.0/workflow-specification/'+workflow_spec_id
+        url = remote+'/v1.0/workflow-sync/'+workflow_spec_id+'/spec'
         return WorkflowSyncService.__make_request(url)
 
     @staticmethod