Massedil 1b2c55508e Prevent access to confirmation_token and reset_password_token via GraphQL API ...

Those tokens do not need to be exposed to authenticated users, not even admin users.

Fixes #1761

2025-05-27 11:18:21 +02:00

..

actors

fix: sanatize FeedToken

2025-04-05 23:45:33 +02:00

custom

fix: prevent sending group physical address if it's empty and allow empty text for timezone

2023-12-03 18:14:00 +01:00

discussions

fix(backend): hide non-public replies to comments in event comment threads

2024-02-08 17:23:20 +01:00

events

feat: add links to cancel anonymous participations in emails

2023-12-01 11:29:53 +01:00

todos

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

users

fix(push): fix push subscriptions registration

2023-08-24 11:49:19 +02:00

activity.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

actor.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

address.ex

style: run mix format

2023-08-17 14:50:44 +02:00

admin.ex

all developments of milestone 1

2024-04-10 12:36:21 +00:00

auth_application.ex

fix(apps): fix device flow authorization process

2023-05-30 14:24:52 +02:00

config.ex

feat(config): add durationOfLongEvent in FullConfig query

2025-02-11 17:40:03 +01:00

conversation.ex

fix(announcements): make sure only valid announcements are shown to the user

2024-02-08 17:23:20 +01:00

event.ex

case harmonization with other fields

2024-11-29 19:15:35 +01:00

followed_group_activity.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

media.ex

all developments of milestone 1

2024-04-10 12:36:21 +00:00

post.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

report.ex

feat(reports): allow reports to hold multiple events

2023-08-31 10:43:36 +02:00

resource.ex

fix(graphql): set default value for resource type parameter

2023-12-06 14:43:51 +01:00

search.ex

case harmonization with other fields

2024-11-29 19:15:35 +01:00

sort.ex

Improve GraphQL documentation and cleanup API

2020-11-20 11:44:00 +01:00

statistics.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

tag.ex

Introduce authorizations with Rajska

2023-03-22 10:19:25 +01:00

user.ex

Prevent access to confirmation_token and reset_password_token via GraphQL API

2025-05-27 11:18:21 +02:00