search

stuysu / api.stuyactivities.org

https://api.stuyactivities.org/graphql
9 stars 2 forks source link

`upcomingUserMeetings` query does not work as expected #669

Open TheEgghead27 opened 2 years ago

TheEgghead27 commented 2 years ago

The route returns various meetings, often for clubs the user is not in.

Further, anyone with a user's ID number may access this route, which may be more exposed than necessary.