benlikescode / geohub

Free, open source geoguessr alternative
https://www.geohub.gg
233 stars 21 forks source link

create-daily-challenge endpoint has no auth #39

Closed ilya-zlobintsev closed 1 year ago

ilya-zlobintsev commented 1 year ago

Currently anyone can create a new daily challenge by going to the create-daily-challenge endpoint. While it won't reset the leaderboard for today, it does reset the challenge itself.

It should probably be fixed ASAP before people abuse it.

benlikescode commented 1 year ago

You're right, thanks for reporting this!

ilya-zlobintsev commented 1 year ago

Are you sure the fix didn't break anything? Because it does not look like the challenge has been reset today (2023-07-23)

benlikescode commented 1 year ago

Thanks again, it should be good now! I will spend some time later cleaning up the leaderboard to reflect the proper challenges 😅

benlikescode commented 1 year ago

Leaderboard should be back to normal now. Winner for 2023-07-23 should show up in about 5 hours