New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

/post routes don't seem to be protected by authentication #649

Open

Aosmiles opened this issue Jan 7, 2023 · 0 comments

Aosmiles commented Jan 7, 2023 •

edited

Loading

Only post/:id seems to be protected with authentication.

It is possible to use postman or thunder client to make requests to the /post endpoints without being logged in.

perhaps moving the ensureAuth to server.js as middleware before all post routes would fix it.

app.use("/", mainRoutes);
app.use("/post", ensureAuth, postRoutes);

maybe this is covered in the classes and I missed something though.

The text was updated successfully, but these errors were encountered:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment