api for post upload

[krmax44]

notable changes:

• split up foirequest/api_views.py into multiple files. this is a breaking change i.e. for froide-campaign and froide-food. checkout their respective branches for testing:
  • https://github.com/okfde/froide-food/tree/krmax44/foirequest-api
  • https://github.com/okfde/froide-campaign/tree/krmax44/foirequest-api
• add create/update methods to message endpoint
• modified CreateOnlyWithScopePermission, so that regular authentication can also be used. please review carefully, see df7b5a3

ts client example:

import { retrieveFoiMessage } from './api/index.ts'

retrieveFoiMessage({
  path: { id: '22699' }
}).then((response) => {
  console.log(response.data?.kind) // "email" | "post" | "fax" | "upload" | "phone" | "visit" | "import" | undefined
})

[krmax44]

I've split up models and views by FoiRequestMessage and FoiRequestDraftMessage (with endpoints api/v1/message and api/v1/message/draft). While this also reduces the risk of leaking drafts, in the request's detail page the message attribute will now no longer list drafts. If that is undesirable, we'd need to update this function:

froide/froide/foirequest/serializers.py

Lines 138 to 144 in f00b8e1

	def get_messages(self, obj):
	qs = optimize_message_queryset(
	self.context["request"], FoiMessage.objects.filter(request=obj)
	)
	return FoiMessageSerializer(
	qs, read_only=True, many=True, context=self.context
	).data