julien/adastra_api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
64 Commits 4 Branches 0 Tags
ece5506904ac4d39d497157a1eb12bc539ba9c8e
Commit Graph

2 Commits

Author SHA1 Message Date
julien ece5506904 fix(comments): use authenticated user id as authorId instead of req.body 
Accepting authorId from the request body allowed any authenticated user
to create comments impersonating another user. The author is now always
the authenticated user from req.payload.
 2026-04-26 20:31:37 +02:00
julien d8195dbf31 Controller and Model updates 2026-03-21 02:30:46 +01:00