search

expandorg / worker-app

worker application
https://portal.expand.org/
Mozilla Public License 2.0
2 stars 0 forks source link

Profile not saving #276

Closed kieranoreilly closed 4 years ago

kieranoreilly commented 4 years ago

https://www.loom.com/share/66351f08240f46f886a5a152f810f3d6

In the response from https://api.expand.org/v1/workers/profile I see the message {"message":"You are not authorized!"} @sslava @edshadi

edshadi commented 4 years ago

@kieranoreilly I'm unable to recreate this bug. On my profile, things are working fine.

sslava commented 4 years ago

me neither! Is it happened with every user for u?

kieranoreilly commented 4 years ago

I'm only seeing this with my user kieran@expand.org maybe his account's data is corrupted. I'm going to delete it all and try again

kieranoreilly commented 4 years ago

Issue went away when I reset data and retried.

edshadi commented 4 years ago

@kieranoreilly @sslava I have it so if someone tries to update a profile that's not theirs, they get an unauthorized access. Meaning, if the id in the JWT token is different from the id you're trying to update, the service stops you.