augustin-wien / augustina-backend

An open-source web shop designed for selling magazines on the street.
GNU Affero General Public License v3.0
4 stars 0 forks source link

Create handler for vendors overview #108

Closed lebe1 closed 10 months ago

lebe1 commented 10 months ago

Type of change

Description

IMPORTANT TO KNOW

CHANGES

TODO

I think need one more check in our VendorsAuthMiddleware that the Email of our vendor matches with the one on keycloak. If we won't implement it, I assume anyone can log into someone else's account, right @nanu-c ?

Checklist:

nanu-c commented 10 months ago

This should actually work like Adds handler for vendor overview with the route /me/ without an id. So i can only get my own data. The keycloak userinfo should include the email, that is then used for searching the vendor.

lebe1 commented 10 months ago

This should actually work like Adds handler for vendor overview with the route /me/ without an id. So i can only get my own data. The keycloak userinfo should include the email, that is then used for searching the vendor.

Okay there is some gap that I still do not understand about keycloak providing us specific information but if you say all I should is removing the /{id}/ part I will do this and merge it @nanu-c ?