search

MoralCode / ClassClockAPI

The ClassClock API for storing and accessing schedule data
https://api.classclock.app
GNU Affero General Public License v3.0
0 stars 0 forks source link

Bell Schedule Creation Endpoint will crash if not provided with a school ID in the request body #25

Open MoralCode opened 1 year ago

MoralCode commented 1 year ago

https://github.com/MoralCode/ClassClockAPI/blob/06108fe63be3c0cebee22b08f2208d83348c84cd/blueprints/v0.py#L423

this can be reproduced by creating a schedule without selecting a school in the admin UI.

This should return at LEAST a sane error message on the backend. The frontend should also include validation to ensure the form cant be submitted without specifying a school.