Security api calls - Githubissues

localdevices / 3DStreetview

3D streetview MVP dashboard

GNU Affero General Public License v3.0

0 stars 1 forks source link

Security api calls #15

Closed hcwinsemius closed 3 years ago

hcwinsemius commented 3 years ago

Currently any user can "steal" credentials to ODK or ODM servers or use database models without any password restrictions. Good start would be to close the API to logged in users by adding auth=.. directives to the headers of all API calls.

hcwinsemius commented 3 years ago

Splitted in several issues, closing this one.