fix: always allow __typename in all AllowedDataFieldsMixin models

Refs: HP-2469
City-of-Helsinki · Sep 5, 2024 · 3e0de6b · 3e0de6b
1 parent 327bbfa
commit 3e0de6b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/profiles/models.py b/profiles/models.py
@@ -48,7 +48,7 @@ class AllowedDataFieldsMixin:
     """
 
     allowed_data_fields_map = {}
-    always_allow_fields = ["id", "service_connections"]
+    always_allow_fields = ["__typename", "id", "service_connections"]
     check_allowed_data_fields = True
 
     @classmethod
@@ -120,7 +120,6 @@ class Meta:
         "language",
         "contact_method",
         "login_methods",
-        "__typename",
     ]
 
     def resolve_profile(self):

diff --git a/profiles/tests/test_gql_my_profile_query.py b/profiles/tests/test_gql_my_profile_query.py
@@ -480,6 +480,7 @@ def test_my_profile_always_allowed_fields(user_gql_client, service):
                 __typename
                 id
                 verifiedPersonalInformation {
+                    __typename
                     firstName
                 }
                 serviceConnections {