Details
-
Type:
Monitor
-
Status: Closed
-
Priority:
Major
-
Resolution: Done
-
Affects Version/s: None
-
Fix Version/s: 2021
-
Component/s: FIWARE-TECH-HELP
-
Labels:
Description
Created question in FIWARE Q/A platform on 10-10-2019 at 12:10
Please, ANSWER this question AT https://stackoverflow.com/questions/58320424/delete-request-for-organizations-does-not-require-auth-token
Question:
DELETE request for organizations does not require auth token
Description:
I've noticed when you are about to delete an organization the suggested request in docu is this one (subsection DELETE AN ORGANIZATION inside ORGANIZATION CRUD ACTIONS):
curl -iX DELETE \
'http://localhost:3005/v1/organizations/organization-id' \
-H 'Content-Type: application/json' \
Which does not include the X-Auth-token as part of the header.
Could this result in a security issue (allowing anyone to delete any organization)?
Activity
| Field | Original Value | New Value |
|---|---|---|
| Component/s | FIWARE-TECH-HELP [ 10278 ] |
| Status | Open [ 1 ] | In Progress [ 3 ] |
| Resolution | Done [ 10000 ] | |
| Status | In Progress [ 3 ] | Closed [ 6 ] |
| Assignee | Backlog Manager [ backlogmanager ] |
| Fix Version/s | 2021 [ 12600 ] |