Make /admin/jsi18n/ view accessible to unauthenticated users

Fixes #10293

CHANGELOG.txt

@@ -61,6 +61,7 @@ Changelog
  * Fix: Fix server-side caching of the icons sprite (Thibaud Colas)
  * Fix: Avoid showing scrollbars in the block picker unless necessary (Babitha Kumari)
  * Fix: Always show Add buttons, guide lines, Move up/down, Duplicate, Delete; in StreamField and Inline Panel (Thibaud Colas)
+ * Fix: Make admin JS i18n endpoint accessible to non-authenticated users (Matt Westcott)
  * Docs: Add code block to make it easier to understand contribution docs (Suyash Singh)
  * Docs: Add new "Icons" page for icons customisation and reuse across the admin interface (Coen van der Kamp, Thibaud Colas)
  * Docs: Fix broken formatting for MultiFieldPanel / FieldRowPanel permission kwarg docs (Matt Westcott)

docs/releases/5.0.md

@@ -81,6 +81,7 @@ Support for adding custom validation logic to StreamField blocks has been formal
  * Fix server-side caching of the icons sprite (Thibaud Colas)
  * Avoid showing scrollbars in the block picker unless necessary (Babitha Kumari)
  * Always show Add buttons, guide lines, Move up/down, Duplicate, Delete; in StreamField and Inline Panel (Thibaud Colas)
+ * Make admin JS i18n endpoint accessible to non-authenticated users (Matt Westcott)
 
 ### Documentation
 

wagtail/admin/tests/test_views.py

@@ -124,3 +124,12 @@ class TestPasswordResetView(TestCase):
         self.assertContains(
             response, '<input type="text" name="captcha" required id="id_captcha">'
         )
+
+
+class TestJsi18nView(TestCase):
+    def test_jsi18n_does_not_require_login(self):
+        response = self.client.get(reverse("wagtailadmin_javascript_catalog"))
+        self.assertEqual(response.status_code, 200)
+        # get content type header without the "charset" suffix
+        content_type = response["content-type"].split(";")[0]
+        self.assertEqual(content_type, "text/javascript")

wagtail/admin/urls/__init__.py

@@ -93,11 +93,6 @@ urlpatterns = [
     ),
     path("account/", account.account, name="wagtailadmin_account"),
     path("logout/", account.LogoutView.as_view(), name="wagtailadmin_logout"),
-    path(
-        "jsi18n/",
-        JavaScriptCatalog.as_view(packages=["wagtail.admin"]),
-        name="wagtailadmin_javascript_catalog",
-    ),
     path(
         "dismissibles/",
         dismissibles.DismissiblesView.as_view(),
@@ -147,6 +142,12 @@ urlpatterns += [
     ),
     # Password reset
     path("password_reset/", include(wagtailadmin_password_reset_urls)),
+    # JS translation catalog
+    path(
+        "jsi18n/",
+        JavaScriptCatalog.as_view(packages=["wagtail.admin"]),
+        name="wagtailadmin_javascript_catalog",
+    ),
 ]