search

cedric05 / avalanche

1 stars 0 forks source link

User Token doesn't validate correctly #34

Closed cedric05 closed 4 months ago

cedric05 commented 4 months ago

Currently UserToken also checks like auth_token for project where as, user_token should be validated in following manner

  1. search for user_token in database
  2. check if support user has project access to execute.
  3. if yes, proceed,
  4. if not, reject
cedric05 commented 4 months ago

fixed via https://github.com/cedric05/avalanche/commit/65ab31c6c4ec80b8e2000c4f72849c3dc33606da