From 4ab694fec924832452eb2c12154f18c2ac4d5530 Mon Sep 17 00:00:00 2001
From: Maximilien Cuony <maximilien@theglu.org>
Date: Sat, 18 Jan 2014 21:51:10 +0100
Subject: [PATCH] Switching back to post for api

---
 client/libs/polybanking.py |  6 +++---
 server/api/views.py        | 22 +++++++++++-----------
 2 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/client/libs/polybanking.py b/client/libs/polybanking.py
index 10f363c..8be14a8 100644
--- a/client/libs/polybanking.py
+++ b/client/libs/polybanking.py
@@ -75,7 +75,7 @@ def get_transactions(self, max_transaction=100):
         data['max_transaction'] = max_transaction
 
         try:
-            result = requests.get(self.server + '/api/transactions/', params=data).json()
+            result = requests.post(self.server + '/api/transactions/', data=data).json()
             if result['result'] != 'ok':
                 return None
 
@@ -94,7 +94,7 @@ def get_transaction(self, reference):
         data['reference'] = reference
 
         try:
-            result = requests.get(self.server + '/api/transactions/' + reference + '/', params=data).json()
+            result = requests.post(self.server + '/api/transactions/' + reference + '/', data=data).json()
             if result['result'] != 'ok':
                 return None
 
@@ -113,7 +113,7 @@ def get_transaction_logs(self, reference):
         data['reference'] = reference
 
         try:
-            result = requests.get(self.server + '/api/transactions/' + reference + '/logs/', params=data).json()
+            result = requests.post(self.server + '/api/transactions/' + reference + '/logs/', data=data).json()
             if result['result'] != 'ok':
                 return None
 
diff --git a/server/api/views.py b/server/api/views.py
index 38abac5..bc712fd 100644
--- a/server/api/views.py
+++ b/server/api/views.py
@@ -2,7 +2,7 @@
 from django.shortcuts import get_object_or_404
 from django.views.decorators.csrf import csrf_exempt
 from django.http import HttpResponse
-from django.views.decorators import require_GET
+from django.views.decorators import require_POST
 from django.utils.translation import ugettext_lazy as _
 
 
@@ -14,15 +14,15 @@
 
 
 @csrf_exempt
-@require_GET
+@require_POST
 def transactions_list(request):
     """Return the list of transaction"""
-    config_pk = request.GET.get('config_id', -1)
-    secret = request.GET.get('secret', '#')
+    config_pk = request.POST.get('config_id', -1)
+    secret = request.POST.get('secret', '#')
 
     config = get_object_or_404(Config, pk=config_pk, key_api=secret)
     try:
-        max_transaction = int(request.GET['max_transaction'])
+        max_transaction = int(request.POST['max_transaction'])
     except (ValueError, KeyError):
         max_transaction = 100
 
@@ -35,11 +35,11 @@ def transactions_list(request):
 
 
 @csrf_exempt
-@require_GET
+@require_POST
 def transactions_show(request, reference):
     """Return details of a transaction"""
-    config_pk = request.GET.get('config_id', -1)
-    secret = request.GET.get('secret', '#')
+    config_pk = request.POST.get('config_id', -1)
+    secret = request.POST.get('secret', '#')
 
     config = get_object_or_404(Config, pk=config_pk, key_api=secret)
 
@@ -49,11 +49,11 @@ def transactions_show(request, reference):
 
 
 @csrf_exempt
-@require_GET
+@require_POST
 def transactions_show_logs(request, reference):
     """Return logs of a transaction"""
-    config_pk = request.GET.get('config_id', -1)
-    secret = request.GET.get('secret', '#')
+    config_pk = request.POST.get('config_id', -1)
+    secret = request.POST.get('secret', '#')
 
     config = get_object_or_404(Config, pk=config_pk, key_api=secret)