UserInfo Endpoint not Accessible without Cookie

[ridoo]

Expected Behavior

Accessing /api/o/v4/userinfo via Bearer token does work.

Actual Behavior

Currently, a 401 is returned when no Cookie is sent along the request.

Steps to Reproduce the Problem

1. Obtain an access token
2. Make a curl request with Bearer token
3. See 401 returned

Specifications

• GeoNode version: 4.4.x (but 5.x might be affected as well)
• Installation type (vanilla, geonode-project):
• Installation method (manual, docker):
• Platform:
• Additional details: See here, the user is directly read from request:

geonode/geonode/api/views.py

Lines 56 to 58 in 5726c6d

	@csrf_exempt
	def user_info(request):
	user = request.user