search

pjay / plush

Push notifications for mobile apps - built on the Typesafe stack to ensure scalability
Other
103 stars 31 forks source link

Secure bug with adding users #6

Closed asivura closed 10 years ago

asivura commented 10 years ago

You can add users without authorization with this URL: http://:9000/users/add

This users have access for all applications and keys.

pjay commented 10 years ago

Hi,

Thanks for the feedback. At this stage, only authentication is implemented and there's no authorization yet. Feel free to send a pull request :)

Philippe