disarm-dev / douma-api

DiSARM api (2018 and beyond)
MIT License
2 stars 1 forks source link

[WIP] Feature/48 only allow config updates that come to `config` endpoint #49

Open mosaic141688 opened 6 years ago

mosaic141688 commented 6 years ago

After updating how we update seasons, the old app versions can still make POST or PUT requests directly to the config endpoints and still wipe the location_selection. This PR attempts to solve this problem by only allowing POST and 'PUT' requests from to registry client to be made to the config endpoint even if you have authorization.

onlyjsmith commented 6 years ago

@mosaic141688 Great PR explanation!

onlyjsmith commented 6 years ago

@mosaic141688 As discussed earlier, let's hold this PR. We might want to do it in a simpler way. At the moment, the URLs for the editor are not the surge ones, so we'd need to change them anway.