Skip to content

SECURITY FIX: Add authentication and data filtering to /api/v1/flags … #308

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
grich88 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

SECURITY FIX: Add authentication and data filtering to /api/v1/flags … #308

grich88 wants to merge 1 commit into from

Conversation

@grich88
Copy link

@grich88 grich88 commented Oct 15, 2025

…endpoint

  • Require authentication for accessing flags endpoint
  • Require admin role for sensitive configuration access
  • Filter sensitive data (AUTH0_DOMAIN, AUTH0_APP_CLIENT_ID, SAML_AUTH_ACS_URL, etc.)
  • Prevent information disclosure vulnerability

Fixes: #307
SECURITY FIX: Add authentication and data filtering to /api/v1/flags …
ade250f 
…endpoint - Require authentication for accessing flags endpoint - Require admin role for sensitive configuration access - Filter sensitive data (AUTH0_DOMAIN, AUTH0_APP_CLIENT_ID, SAML_AUTH_ACS_URL, etc.) - Prevent information disclosure vulnerability Fixes: #307
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant

@grich88