events: rename token_view to secret_view

authentik/core/api/tokens.py

@@ -1,9 +1,12 @@
 """Tokens API Viewset"""
+from django.db.models.base import Model
 from django.http.response import Http404
+from drf_yasg2.utils import swagger_auto_schema
 from rest_framework.decorators import action
+from rest_framework.fields import CharField
 from rest_framework.request import Request
 from rest_framework.response import Response
-from rest_framework.serializers import ModelSerializer
+from rest_framework.serializers import ModelSerializer, Serializer
 from rest_framework.viewsets import ModelViewSet
 
 from authentik.core.models import Token
@@ -19,6 +22,18 @@ class TokenSerializer(ModelSerializer):
         fields = ["pk", "identifier", "intent", "user", "description"]
 
 
+class TokenViewSerializer(Serializer):
+    """Show token's current key"""
+
+    key = CharField(read_only=True)
+
+    def create(self, validated_data: dict) -> Model:
+        raise NotImplementedError
+
+    def update(self, instance: Model, validated_data: dict) -> Model:
+        raise NotImplementedError
+
+
 class TokenViewSet(ModelViewSet):
     """Token Viewset"""
 
@@ -26,6 +41,7 @@ class TokenViewSet(ModelViewSet):
     queryset = Token.filter_not_expired()
     serializer_class = TokenSerializer
 
+    @swagger_auto_schema(responses={200: TokenViewSerializer(many=False)})
     @action(detail=True)
     def view_key(self, request: Request, identifier: str) -> Response:
         """Return token key and log access"""
@@ -33,5 +49,5 @@ class TokenViewSet(ModelViewSet):
         if not tokens.exists():
             raise Http404
         token = tokens.first()
-        Event.new(EventAction.TOKEN_VIEW, token=token).from_http(request)
-        return Response({"key": token.key})
+        Event.new(EventAction.SECRET_VIEW, token=token).from_http(request)
+        return Response(TokenViewSerializer({"key": token.key}).data)