Remove auth for public api endpoint, add for invalid UUID

Author: xkello

server/mergin/sync/public_api_v2_controller.py

@@ -456,7 +456,6 @@ def list_workspace_projects(workspace_id, page, per_page, order_params=None, q=N
     data = ProjectSchemaV2(many=True).dump(result)
     return jsonify(projects=data, count=total, page=page, per_page=per_page), 200
 
-@auth_required
 def list_batch_projects():
     """List projects by given list of UUIDs. Limit to 100 projects per request.
 

server/mergin/tests/test_public_api_v2.py

@@ -714,6 +714,10 @@ def test_list_projects_in_batch(client):
     resp = client.post(url, json={})
     assert resp.status_code == 400
 
+    # invalid UUID -> 400
+    resp = client.post(url, json={"ids": ["invalid-uuid", pub_id]})
+    assert resp.status_code == 400
+
     # returns envelope with projects list
     resp = client.post(url, json={"ids": [priv_id, pub_id]})
     assert resp.status_code == 200
@@ -726,7 +730,6 @@ def test_list_projects_in_batch(client):
         assert "name" in proj  # full project object
 
     # Reset global permissions
-    from ..config import Configuration
     Configuration.GLOBAL_READ = False
     Configuration.GLOBAL_WRITE = False
     Configuration.GLOBAL_ADMIN = False