note that endpoints need grant security
This commit is contained in:
		
							parent
							
								
									af0ef74f23
								
							
						
					
					
						commit
						f18dab15b7
					
				
							
								
								
									
										5
									
								
								rest.js
									
									
									
									
									
								
							
							
						
						
									
										5
									
								
								rest.js
									
									
									
									
									
								
							| @ -51,11 +51,12 @@ module.exports.create = function (bigconf, deps, app) { | |||||||
|   app.use(   '/exchange_token',                 attachSiteModels); |   app.use(   '/exchange_token',                 attachSiteModels); | ||||||
|   app.post(  '/exchange_token',                 Accounts.restful.createToken.exchangeToken); |   app.post(  '/exchange_token',                 Accounts.restful.createToken.exchangeToken); | ||||||
| 
 | 
 | ||||||
|   app.use(   '/acl/profile',                    attachSiteModels); |   // TODO secure ACL endpoints with proper grants
 | ||||||
|  |   app.use(   '/acl/profile',                    attachSiteModels, /*app.grantsRequired(['profile@oauth3.org'])*/); | ||||||
|   app.get(   '/acl/profile',                    Accounts.restful.getProfile); |   app.get(   '/acl/profile',                    Accounts.restful.getProfile); | ||||||
|   app.post(  '/acl/profile',                    Accounts.restful.setProfile); |   app.post(  '/acl/profile',                    Accounts.restful.setProfile); | ||||||
| 
 | 
 | ||||||
|   app.use(   '/acl/contact_nodes',              attachSiteModels); |   app.use(   '/acl/contact_nodes',              attachSiteModels, /*app.grantsRequired(['profile@oauth3.org'])*/); | ||||||
|   app.post(  '/acl/contact_nodes',              Accounts.restful.claimContact); |   app.post(  '/acl/contact_nodes',              Accounts.restful.claimContact); | ||||||
|   app.post(  '/acl/contact_nodes/:id',          Accounts.restful.verifyContact); |   app.post(  '/acl/contact_nodes/:id',          Accounts.restful.verifyContact); | ||||||
| 
 | 
 | ||||||
|  | |||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user