I am seeing similar behavior too for read API (for example get user by email api), master token and _uid are ignored when sending request. The document states that master token can be used, however it doesn't seem to be the case for all APIs.
Not getting authenticated data on posts when sending _uid parameter
I want to get correct user related data on posts (e.g. selfPost, bookmarked, upvoted) that are user-specific, but I always get
falseeven if the user with uid (I am sending it as param) is the poster. How can I fix this?
PitaJ Global Moderator Plugin & Theme Dev
@elina-hovakimyan what have you tried?
@elina-hovakimyan what routes are you trying, and can you provide a sample cURL call for us to attempt to reproduce?
This might actually have been fixed recently...
@elina-hovakimyan Right, this might have actually been fixed with the latest NodeBB commits. We now authenticate all API and page requests.
Can you try with the latest
Copyright © 2023 NodeBB | Contributors