Security : check shop ID when loging

YoannBuzenet / MBI-Front-End

React.js Stateless - Company software that allows shops to automatize their product sourcing by setting automatic buying price (on more than 20,000 products) depending on market trends. We provide data via our centralized API each React app can call, and then post it automatically on a marketplace through their API.

0 stars 0 forks source link

Security : check shop ID when loging #42

Closed YoannBuzenet closed 4 years ago

YoannBuzenet commented 4 years ago

il faudrait juste que tu teste reactside si user_shop est dans role et que l'id du shop dans user.shop.id soit celui du shop que tu a en env

YoannBuzenet commented 4 years ago

Corrected with Auth Delegation + shopKey