Commit Graph
3 Commits
Author SHA1 Message Date
zeripathandtechknowlogick c0bbbdd30b Backport #5250 on v1.6: Fix Issue 5249 and protect /api/v1/admin routes with CSRF token (#5272)
* Add CSRF checking to reqToken and place CSRF in the post for deadline creation

Fixes #5226, #5249

* /api/v1/admin/users routes should have reqToken middleware
2018-11-04 10:42:15 -05:00
zeripathandLunny Xiao 36e7cb9755 Update Swagger API to match the return of /users/search (#4847)
Signed-off-by: Andrew Thornton <art27@cantab.net>
2018-09-21 16:56:26 +08:00
zeripathandtechknowlogick d293a2b9d6 Add sudo functionality to the API (#4809) 2018-09-06 23:31:29 -04:00