note that endpoints need grant security
This commit is contained in:
parent
af0ef74f23
commit
f18dab15b7
5
rest.js
5
rest.js
@ -51,11 +51,12 @@ module.exports.create = function (bigconf, deps, app) {
|
||||
app.use( '/exchange_token', attachSiteModels);
|
||||
app.post( '/exchange_token', Accounts.restful.createToken.exchangeToken);
|
||||
|
||||
app.use( '/acl/profile', attachSiteModels);
|
||||
// TODO secure ACL endpoints with proper grants
|
||||
app.use( '/acl/profile', attachSiteModels, /*app.grantsRequired(['profile@oauth3.org'])*/);
|
||||
app.get( '/acl/profile', Accounts.restful.getProfile);
|
||||
app.post( '/acl/profile', Accounts.restful.setProfile);
|
||||
|
||||
app.use( '/acl/contact_nodes', attachSiteModels);
|
||||
app.use( '/acl/contact_nodes', attachSiteModels, /*app.grantsRequired(['profile@oauth3.org'])*/);
|
||||
app.post( '/acl/contact_nodes', Accounts.restful.claimContact);
|
||||
app.post( '/acl/contact_nodes/:id', Accounts.restful.verifyContact);
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user