check authorisation in API (query, text access)

ccs-amsterdam / amcat4

API server for AmCAT4 Text Analysis

GNU Affero General Public License v3.0

4 stars 2 forks source link

Open vanatteveldt opened 5 years ago

vanatteveldt commented 5 years ago

API needs to check authorisation in all calls, and this needs to be checked.

(including unauthenticated users)

vanatteveldt commented 2 years ago

I think most API unit tests have auth checks as well; exceptions:

vanatteveldt commented 1 month ago

@kasperwelbers I think you implemented this, right?