search

linagora / esn-frontend-common-libs

Common ground for OpenPaaS frontend (https://open-paas.org)
Other
4 stars 12 forks source link

Avatar URL should always be /api/users/:id/avatar #152

Open MichaelBailly opened 4 years ago

MichaelBailly commented 4 years ago

When using <img src="...">, we cannot plug custom headers like bearer ones.

To be compatible with OIDC:

The route "get my avatar" /api/user/profile/avatar is protected, so it should not be used anymore.

The route to use instead is /api/users/:userId/profile/avatar , which is an unprotected route.