I am seeing similar behavior too for read API (for example get user by email api), master token and _uid are ignored when sending request. The document states that master token can be used, however it doesn't seem to be the case for all APIs.
Not getting authenticated data on posts when sending _uid parameter
-
I want to get correct user related data on posts (e.g. selfPost, bookmarked, upvoted) that are user-specific, but I always get
false
even if the user with uid (I am sending it as param) is the poster. How can I fix this? -
@elina-hovakimyan what have you tried?
-
@elina-hovakimyan what routes are you trying, and can you provide a sample cURL call for us to attempt to reproduce?
This might actually have been fixed recently...
-
@elina-hovakimyan Right, this might have actually been fixed with the latest NodeBB commits. We now authenticate all API and page requests.
Can you try with the latest
master
?