feat: Add endpoint to post new allowlist

[steverydz]

Done

Adds an endpoint to create a new remodel allowlist

How to QA

Run locally and use Postman to test the responses

URL

http://localhost:8004/api/store/njwQYXFnS7ppo7LaGxoh7aqVZc1CPi26/models/remodel-allowlist

Headers

• Content-Type: application/json
• Cookie: YOUR COOKIE
• X-Csrftoken: YOUR TOKEN

Body

[{"from-model":"testmodelzzzz","to-model":"my-name-is-luke","from-serial":"GN4R66MulBPDMooy8Ch_VNzkJBW56zFwEupqSodfKhFbfVz_5hSUgSWztUwbvNPB-Hlkj"}]

Requests

• Make a request - you should get a conflict error
• Change the serial to a random string and make a request - it should be successful
• Change one of the model names to a random string - you should get an error
• Change the body to [] - you should get an error

Testing

• This PR has tests
• No testing required (explain why):

Security

• Security considerations for review (list them):
  • Examples:
  • Access control: users can only access their own data
  • Input: user input is validated and sanitised
  • Sensitive data: secret or private data is not exposed in any way
  • ...
• This PR has no security considerations (explain why): Follows existing patterns for posting data

Issue / Card

Fixes https://warthogs.atlassian.net/browse/WD-33419

Screenshots

n/a

UX Approval

• This PR does not require UX approval
• This PR does require UX approval (add context):

[webteam-app]

Demo

Jenkins

demos.haus

[Copilot]

Pull request overview

This PR adds a new POST endpoint to create remodel allowlists for stores. The endpoint accepts JSON payloads containing allowlist data (description, from-model, from-serial, to-model) and creates them via the publisher gateway.

Changes:

• New POST endpoint /api/store/<store_id>/models/remodel-allowlist for creating remodel allowlists
• Endpoint includes authentication (@login_required, @exchange_required) and error handling for API and generic exceptions
• Test suite with three test cases covering success, store not found, and empty payload scenarios

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File	Description
webapp/endpoints/models.py	Adds create_remodel_allowlist function with POST route, implementing the endpoint logic with exception handling
tests/endpoints/tests_models.py	Adds TestCreateRemodelAllowlist test class with three test methods to verify endpoint behavior

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

[steverydz]

@bartaz @edisile I've updated this so that we will use the status code from the store api when there is an error, and also have an StoreApiResourceNotFound to handle that case

[bartaz]

LGTM, thanks