WhisperMusic / WhisperServer

0 stars 0 forks source link

Authentication requirement while uploading tracks #60

Closed soucelover closed 3 months ago

soucelover commented 3 months ago

Proposal

Now when you trying to upload track you always need to specify uploader field which allows adding tracks on any user's behalf. This is some kind of security leak combined with inconvenience.

It's proposed to rewrite upload view to require authentication and then set uploader field for serializer.