search

kiselev-nikolay / direct-to-me

Self-hosted application for redirecting user or application data in the background
https://direct-to-me.com/
4 stars 1 forks source link

Access controls? #12

Open prologic opened 2 years ago

prologic commented 2 years ago

How do you protect the creation/modification of redirect entries?

kiselev-nikolay commented 2 years ago

It's very insecure. It needs to be done and urgently!! I will add access controls on this week. c:

kiselev-nikolay commented 2 years ago

Hi. Just did the authorization check for api endpoints #13 and merged it with the main branch. Thank you! ;) @prologic may we close the issue?

prologic commented 2 years ago

Is there now some kind of login system for the web interface as well?

kiselev-nikolay commented 2 years ago

@prologic You totally right! Now I've done it properly. I apologise for being unprofessional in this question. https://github.com/kiselev-nikolay/direct-to-me/pull/14

prologic commented 2 years ago

Lovely! I'll rebuild locally and check it out! Thanks heaps!