gamerpals / Backend

0 stars 0 forks source link

PUT api/User not secured #14

Closed MauriceNino closed 5 years ago

MauriceNino commented 5 years ago

Expected Behavior

Only accessable by the user that is accessed via the request or maybe people with admin role

Current Behavior

Everyone can access it (Even without Bearer token)

Possible Solution

Secure it with the mechanism used for other methods

Detailed Description

/