Using the /api/post/upload endpoint with master token ignores the _uid param


  • Using the /api/post/upload endpoint with master token ignores the _uid param as it replies with

    {
      "status": {
        "code": "forbidden",
        "message": "[[error:no-privileges]]"
      },
      "response": {}
    }
    

    I have edited the privileges to allow guests to upload and this and immediately worked so I guess the /api/post/upload endpoint simply ignores the _uid param? Or do I need to send it somehow specifically?


  • I am seeing similar behavior too for read API (for example get user by email api), master token and _uid are ignored when sending request. The document states that master token can be used, however it doesn't seem to be the case for all APIs.

Suggested Topics

| |