TASK: Add way of authenticating pages without calling the backend

pace-running / pace3

used for "lauf gegen rechts 2023"

2 stars 1 forks source link

TASK: Add way of authenticating pages without calling the backend #67

Open niklasmertens opened 1 year ago

niklasmertens commented 1 year ago

Some admin pages that are routed via the frontend app are available even if not authenticated (e.g. /admin/finance). While this does not pose any direct risk as the relevant backend apis still enforce auth, it is still weird behaviour.