Skip to content

fix(sec): apply authMiddleware to GET /api/users endpoint (#11595) - #11662

Open
jihadMo wants to merge 1 commit into
SecureBananaLabs:mainfrom
jihadMo:fix/get-users-unauthenticated-exposure
Open

fix(sec): apply authMiddleware to GET /api/users endpoint (#11595)#11662
jihadMo wants to merge 1 commit into
SecureBananaLabs:mainfrom
jihadMo:fix/get-users-unauthenticated-exposure

Conversation

@jihadMo

@jihadMo jihadMo commented Aug 9, 2026

Copy link
Copy Markdown

Resolves #11595 /claim #11595.

Applies \�uthMiddleware\ to GET /api/users\ in \�pps/api/src/routes/userRoutes.js\ preventing unauthenticated user list exposure, backed by unit test suite in \�pps/api/src/routes/users-get-auth.test.js.

github-actions Bot added a commit that referenced this pull request Aug 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bug: GET /api/users exposes user list without authentication

1 participant