airqo-platform / airqo-platform/AirQo-api
Authentication Middleware Missing on Sensitive Routes
未关闭
- 主要语言
- JavaScript
- 星标
- 26
- 派生
- 24
- 平均合并
- 5 小时 36 分钟
- 30 天内合并 PR
- 81
描述
The preference modification routes `/upsert`, `/replace`, `/`, and `/:user_id` do not have authentication middleware (`setJWTAuth`, `authJWT`) applied. To maintain security and prevent unauthorized access, authentication should be enforced on these routes.
**Affected File:** `src/auth-service/routes/v2/preferences.js`
**Routes:** `/upsert`, `/replace`, `/`, `/:user_id`
**PR URL:** https://github.com/airqo-platform/AirQo-api/pull/3699
**Original Comment:** https://github.com/airqo-platform/AirQo-api/pull/3699#discussion_r1807822915
Requested by @Baalmart
贡献指南
评估
这个 Issue 还没有评估数据。