NodeBB write api security

[abhishek yadav]

Hi Team,

do anyone know how to secure these APIs because currently anyone can perform any operation. is there any bearer token or some security is there so that they shouldn't be publicly available for everyone.

ReDoc

(docs.nodebb.org)

It will be really helpful if someone already came across this.

Thanks,
Abhishek

[PitaJ]

@abhishek-yadav if you have a security issue to report, please contact NodeBB by email [email protected]

The write API is secured behind a bearer token, either a master or user one.

[abhishek yadav]

@pitaj can you please share from where i can generate bearer token ? is there any documentation link please share.

[abhishek yadav]

@abhishek-yadav I found it under Settings -> API access.

Thanks for checking