/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| administration | ||
| assets | ||
| configuration | ||
| development | ||
| installation | ||
| clients.md | ||
| index.md | ||
/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| administration | ||
| assets | ||
| configuration | ||
| development | ||
| installation | ||
| clients.md | ||
| index.md | ||