unee-t / frontend

Meteor front end
https://case.dev.unee-t.com/
GNU Affero General Public License v3.0
9 stars 17 forks source link

req.query.accessToken should be a req.headers.authorization check instead on POST #843

Open kaihendry opened 5 years ago

kaihendry commented 5 years ago

I was wondering why in https://github.com/unee-t/lambda2sns APIAccessToken was used as get parameters as well as a header -H "Authorization: Bearer XXXXX".

I removed the parameter assuming both ways would work & Iit didn't. I can see now there is no code to check req.headers.authorization in the POST request for example in

So be good to update the code to support Authorization for two reasons: