/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| admin_api.md | ||
| chats.md | ||
| differences_in_mastoapi_responses.md | ||
| nodeinfo.md | ||
| pleroma_api.md | ||
| prometheus.md | ||
/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| admin_api.md | ||
| chats.md | ||
| differences_in_mastoapi_responses.md | ||
| nodeinfo.md | ||
| pleroma_api.md | ||
| prometheus.md | ||