Handling read_only/write_only fields on OpenAPI

https://pulp.plan.io/issues/5622
closes #5622

CHANGES/5622.bugfix

@@ -0,0 +1 @@
+Handling `read_only` and `write_only` fields on OpenAPISchema.

pulpcore/app/openapigenerator.py

@@ -7,7 +7,51 @@
 from drf_yasg.generators import OpenAPISchemaGenerator
 from drf_yasg.inspectors import SwaggerAutoSchema
 from drf_yasg.openapi import Parameter
-from drf_yasg.utils import filter_none, force_real_str
+from drf_yasg.utils import filter_none, force_real_str, no_body
+
+
+class ReadOnly:
+    """
+    Read only objects from schema.
+    Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+    """
+
+    def get_fields(self):
+        """
+        Get the read_only fields.
+        """
+
+        new_fields = OrderedDict()
+        for fieldName, field in super().get_fields().items():
+            if not field.write_only:
+                new_fields[fieldName] = field
+        return new_fields
+
+
+class WriteOnly:
+    """
+    Write only objects from schema.
+    Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+    """
+
+    def get_fields(self):
+        """
+        Get the write_only fields.
+        """
+
+        new_fields = OrderedDict()
+        for fieldName, field in super().get_fields().items():
+            if not field.read_only:
+                new_fields[fieldName] = field
+        return new_fields
+
+
+class BlankMeta:
+    """
+    Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+    """
+
+    pass
 
 
 class Paths(openapi.SwaggerDict):
@@ -373,3 +417,40 @@ def get_tags(self, operation_keys):
             tags = [' '.join(operation_keys[:-1])]
 
         return tags
+
+    def get_view_serializer(self):
+        """
+        Return the view's serializer without read_only fields.
+        Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+        """
+
+        return self._convert_serializer(WriteOnly)
+
+    def get_default_response_serializer(self):
+        """
+        Return the default response serializer for this endpoint without write_only fields.
+        Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+        """
+
+        body_override = self._get_request_body_override()
+        if body_override and body_override is not no_body:
+            return body_override
+
+        return self._convert_serializer(ReadOnly)
+
+    def _convert_serializer(self, new_class):
+        """
+        Creates a new serializer without read_only/write_only fields.
+        Patch: https://github.com/axnsan12/drf-yasg/issues/70#issuecomment-485050813
+        """
+
+        serializer = super().get_view_serializer()
+        if not serializer:
+            return serializer
+
+        class CustomSerializer(new_class, serializer.__class__):
+            class Meta(getattr(serializer.__class__, 'Meta', BlankMeta)):
+                ref_name = new_class.__name__ + serializer.__class__.__name__
+
+        new_serializer = CustomSerializer(data=serializer.data)
+        return new_serializer