NodeBB write api security

[abhishek yadav]

Hi Team,

do anyone know how to secure these APIs because currently anyone can perform any operation. is there any bearer token or some security is there so that they shouldn't be publicly available for everyone.

ReDoc

It will be really helpful if someone already came across this.

Thanks,
Abhishek

[PitaJ]

@abhishek-yadav if you have a security issue to report, please contact NodeBB by email security@nodebb.org

The write API is secured behind a bearer token, either a master or user one.

[abhishek yadav]

@pitaj can you please share from where i can generate bearer token ? is there any documentation link please share.

[abhishek yadav]

@abhishek-yadav I found it under Settings -> API access.

Thanks for checking