fix(api): exclude user_state_details JSONField from UserContactInfo filterset

The new user_state_details JSONField broke UserContactInfoViewSet, which used
filterset_fields = "__all__". django-filter's AutoFilterSet cannot build a
filter for a JSONField and raised:

  AssertionError: AutoFilterSet resolved field 'user_state_details' with
  'exact' lookup to an unrecognized field type JSONField.

Replace the auto filterset with an explicit ApiUserContactInfoFilter that
excludes the field (internal UI state, not meant to be filtered); all other
fields keep their previous auto-filter behaviour.

Author: valentijnscholten

dojo/user/api/filters.py

@@ -2,6 +2,8 @@
 from django_filters import OrderingFilter
 from django_filters import rest_framework as filters
 
+from dojo.models import UserContactInfo
+
 User = get_user_model()
 
 
@@ -42,3 +44,12 @@ class Meta:
             ("last_login", "last_login"),
         ),
     )
+
+
+class ApiUserContactInfoFilter(filters.FilterSet):
+    class Meta:
+        model = UserContactInfo
+        # user_state_details is an internal JSONField for UI state; django-filter
+        # cannot auto-generate a filter for it, so exclude it (everything else
+        # keeps the previous "__all__" auto-filter behaviour).
+        exclude = ["user_state_details"]

dojo/user/api/views.py

@@ -13,7 +13,7 @@
 from dojo.api_v2.views import DojoModelViewSet, PrefetchDojoModelViewSet, schema_with_prefetch
 from dojo.authorization import api_permissions as permissions
 from dojo.models import UserContactInfo
-from dojo.user.api.filters import ApiUserFilter
+from dojo.user.api.filters import ApiUserContactInfoFilter, ApiUserFilter
 from dojo.user.api.serializer import (
     UserContactInfoSerializer,
     UserProfileSerializer,
@@ -71,7 +71,7 @@ class UserContactInfoViewSet(
     serializer_class = UserContactInfoSerializer
     queryset = UserContactInfo.objects.none()
     filter_backends = (DjangoFilterBackend,)
-    filterset_fields = "__all__"
+    filterset_class = ApiUserContactInfoFilter
     permission_classes = (permissions.IsSuperUser, DjangoModelPermissions)
 
     def get_queryset(self):