Switch token attribute to be hidden (#1281)

The encryption part was removed from the cherry-pick.

fixes #1221

(cherry picked from commit d13c427)

CHANGES/1221.bugfix

@@ -0,0 +1 @@
+Switched the attribute `token` on `CollectionRemotes` not to be exposed in the API.

pulp_ansible/app/serializers.py

@@ -183,6 +183,7 @@ class CollectionRemoteSerializer(RemoteSerializer):
         allow_null=True,
         required=False,
         max_length=2000,
+        write_only=True,
     )
 
     sync_dependencies = serializers.BooleanField(

pulp_ansible/tests/functional/api/collection/test_remote.py

@@ -29,13 +29,14 @@ def test_update_auth_url(self):
             auth_url="https://example.com",
         )
         remote = self.remote_collection_api.create(body)
+        self.addCleanup(self.remote_collection_api.delete, remote.pulp_href)
+        assert not hasattr(remote, "token")
         response = self.remote_collection_api.partial_update(remote.pulp_href, {"auth_url": None})
         monitor_task(response.task)
         response = self.remote_collection_api.partial_update(
             remote.pulp_href, {"auth_url": "https://example.com"}
         )
         monitor_task(response.task)
-        self.addCleanup(self.remote_collection_api.delete, remote.pulp_href)
 
     def test_auth_url_requires_token(self):
         """Assert that a `CollectionRemote` with `auth_url` and no `token` can't be created."""