Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can star private segments without view_private scope #162

Open
danshannon opened this issue Apr 3, 2017 · 1 comment
Open

Can star private segments without view_private scope #162

danshannon opened this issue Apr 3, 2017 · 1 comment
Labels
Activity Service has issue test has workaround Strava issue

Comments

@danshannon
Copy link
Owner

danshannon commented Apr 3, 2017 •
edited

Using a token which does NOT have view_private scope

PUT https://www.strava.com/api/v3/segments/1190741/starred?starred=true

Returns 200 OK and a detailed representation of the segment

The segment is flagged as private and therefore should not be visible at all. Strava should return a 401 Unauthorized
dshannonau pushed a commit that referenced this issue Apr 3, 2017
@danshannon
Workaround for #162
d1c8484
@danshannon
Copy link
Owner Author

Same issue with:

HTTP PUT https://www.strava.com/api/v3/segments/8857183/starred?starred=true

Ignores the fact that the segment is flagged as private (and in this case belongs to another user

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Activity Service has issue test has workaround Strava issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@danshannon