Django REST Framework, limiting fields on foreignkey relationship when serializer depth = 1

Question

I am using the Django REST Framework and I have a serializer as follows:

class UserProfileSerializer(serializers.ModelSerializer):   
    class Meta:
        model = UserProfile
        depth = 1
        fields = ['user','team','correct','wrong','percentage']

The problem if this passes all user data (including a hashed password). How do I limit the fields being passed?

I have a UserSerializer as follows (which holds the only fields I really want):

class UserSerializer(serializers.ModelSerializer):
    class Meta:
        model = User
        fields = ['first_name','last_name','username']

neverwalkaloner · Accepted Answer · 2018-03-04 17:17:17Z

5

Instead of depth option declare user field explicitly in UserProfileSerializer and use UserSerializer for this field:

class UserProfileSerializer(serializers.ModelSerializer):   
    user = UserSerializer()
    class Meta:
        model = UserProfile
        fields = ['user','team','correct','wrong','percentage']

Or try to override build_nested_field like this:

class UserProfileSerializer(serializers.ModelSerializer):   
    class Meta:
        model = UserProfile
        depth = 1
        fields = ['user','team','correct','wrong','percentage']

    def build_nested_field(self, field_name, relation_info, nested_depth):
        if field_name == 'user': 
            field_class = UserSerializer
            field_kwargs = get_nested_relation_kwargs(relation_info)

            return field_class, field_kwargs
        return super().build_nested_field(field_name, relation_info, nested_depth)

edited Mar 4, 2018 at 17:17

answered Mar 4, 2018 at 17:07

neverwalkaloner

47.6k7 gold badges101 silver badges103 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Django REST Framework, limiting fields on foreignkey relationship when serializer depth = 1

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related