OpenHumans / open-humans

Powering openhumans.org
https://www.openhumans.org/
MIT License
73 stars 22 forks source link

Remove request user before rendering API responses #1122

Closed madprime closed 3 years ago

madprime commented 3 years ago

Description

Authorization for a given user authenticates the request to that user, to access or modify that user's data. Once the API has handled a request and generated data for the API response, remove the user from the request to prevent use of any further user information in the rendered response.

Testing