airqo-platform / airqo-platform/AirQo-api
Authentication Middleware Missing on Sensitive Routes
Aberta
- Linguagem predominante
- JavaScript
- Estrelas
- 26
- Forks
- 24
- Merge médio
- 5h 36min
- PRs com merge (30d)
- 81
Descrição
The preference modification routes `/upsert`, `/replace`, `/`, and `/:user_id` do not have authentication middleware (`setJWTAuth`, `authJWT`) applied. To maintain security and prevent unauthorized access, authentication should be enforced on these routes.
**Affected File:** `src/auth-service/routes/v2/preferences.js`
**Routes:** `/upsert`, `/replace`, `/`, `/:user_id`
**PR URL:** https://github.com/airqo-platform/AirQo-api/pull/3699
**Original Comment:** https://github.com/airqo-platform/AirQo-api/pull/3699#discussion_r1807822915
Requested by @Baalmart
Guia de contribuição
Avaliação
Esta issue ainda não foi avaliada.