Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adding authentication to user end points. List, GetUser, Count and Delete #166

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Adding authentication to user end points. List, GetUser, Count and Delete #166

wants to merge 3 commits into from

Commits on May 15, 2021

  1. Adding authentication to list and count methods 

    As part of the master of information security bug bounty assignment have identified that these endpoints needs to be secured. Otherwise any one can list the users and get the count without login in
    @ShanuWije
    ShanuWije authored May 15, 2021
    Configuration menu
    Copy the full SHA
    14a9f03 View commit details
    Browse the repository at this point in the history

  2. Added check to ensure only admin can delete users

    @ShanuWije
    ShanuWije committed May 15, 2021
    Configuration menu
    Copy the full SHA
    66e2962 View commit details
    Browse the repository at this point in the history

  3. getUser by id endpoints needs to be authenticated since this can be u… 

    …sed to enumerate all the users in the database without login in
    @ShanuWije
    ShanuWije committed May 15, 2021
    Configuration menu
    Copy the full SHA
    55527de View commit details
    Browse the repository at this point in the history