Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

(SP: 1) Add GET request validation to the endpoint /users #1082

Closed
PavloButynets opened this issue Dec 22, 2024 · 0 comments · Fixed by #1096
Closed

(SP: 1) Add GET request validation to the endpoint /users #1082

PavloButynets opened this issue Dec 22, 2024 · 0 comments · Fixed by #1096
Assignees
@PavloButynets
Labels
Backend Security

Comments

@PavloButynets
Copy link
Contributor

PavloButynets commented Dec 22, 2024 •
edited
Loading

An authorized user can make a request to receive all users
image

Task
It is necessary to make sure that this endpoint is used only for admin:

  • If so, use the existing verification for the admin
  • If not, figure out how to prevent the request to receive all users from each logged-in user

Testing

  • Write tests that check the correctness of validation when requesting this endpoint
@github-project-automation github-project-automation bot moved this to Project Backlog in SpaceToStudy Dec 22, 2024
@PavloButynets PavloButynets changed the title Add GET request validation to the endpoint /users (SP: ) Add GET request validation to the endpoint /users Dec 22, 2024
@PavloButynets PavloButynets self-assigned this Dec 22, 2024
@PavloButynets PavloButynets changed the title (SP: ) Add GET request validation to the endpoint /users (SP: 1) Add GET request validation to the endpoint /users Dec 26, 2024
@PavloButynets PavloButynets linked a pull request Dec 26, 2024 that will close this issue
Added GET request validation to the endpoint /users #1096
Merged
@github-project-automation github-project-automation bot moved this from Project Backlog to Done in SpaceToStudy Jan 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@PavloButynets PavloButynets

Labels
Backend Security
Projects
SpaceToStudy
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Added GET request validation to the endpoint /users ita-social-projects/SpaceToStudy-BackEnd
1 participant
@PavloButynets