Real-Dev-Squad / tiny-site-backend

MIT License
3 stars 5 forks source link

Removed /users API due to security concerns allowing user details visibility #133

Closed vinit717 closed 1 month ago

vinit717 commented 1 month ago

Issue Ticket Number

Description

Fixed the /users API which currently allows any user to see details of other users, which is a security risk. This API should be removed to prevent unauthorized access to user information.

Breaking Changes

If your feature introduces breaking changes or if something is missing, please mention the related issue tickets.

Development Tested?

Confirm whether the changes have been tested locally during development.

Tested in Staging?

Indicate whether the changes have been tested in the staging environment for dev to main.

Database Changes

Indicate whether the changes include modifications to the database.

Screenshots

Attach any relevant screenshots, such as test coverage reports, before and after images, or other visual aids.

Additional Notes

Include any additional notes, considerations, or explanations that might be helpful for reviewers.