ben.carrasco/jambonz-api-server
1
0
Fork 0
mirror of https://github.com/jambonz/jambonz-api-server.git synced 2026-07-23 20:42:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

bugfix: prevent an account level api key from creating an admin-level api key

Browse Source
This commit is contained in:
Dave Horton
2021-06-28 13:00:35 -04:00
parent 0589328f24
commit 7b9390be50
1 changed files with 1 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/routes/api/api-keys.js
+1 -4
View File
@@ -71,10 +71,7 @@ async function validateDeleteToken(req, sid) {
router.post('/', async(req, res) => {
const logger = req.app.locals.logger;
try {
if ('add' in preconditions) {
assert(typeof preconditions.add === 'function');
await preconditions.add(req);
}
await validateAddToken(req);
const uuid = await ApiKey.make(req.body);
res.status(201).json({sid: uuid, token: req.body.token});
} catch (err) {