bastihilger / nova-tiptap

Laravel Nova Tiptap Field
MIT License
172 stars 61 forks source link

Add middleware to api routes #39

Closed andrerei closed 3 years ago

andrerei commented 3 years ago

Currently there is no protection and anyone can add files calling the POST /nova-tiptap/api/files. This PR fixes this security issue, adding a middleware to protect API routes.

I also changed how routes are registered by following what is generated using the nova:resource-tool command.

bastihilger commented 3 years ago

Hi there - first of all thank you for your PR. Could you please in the future check the box "Allow edits by maintainers" so I can make changes right inside your PR?

CleanShot 2021-08-29 at 11 20 42@2x

bastihilger commented 3 years ago

This is now added on v2.0.3