/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| config | ||
| credo/check/consistency | ||
| fixtures | ||
| instance_static | ||
| mix | ||
| pleroma | ||
| support | ||
| test_helper.exs | ||
/api/oauth_tokens skipped the scope check, so a token with any scope could list the user's sessions and revoke them. |
||
|---|---|---|
| .. | ||
| config | ||
| credo/check/consistency | ||
| fixtures | ||
| instance_static | ||
| mix | ||
| pleroma | ||
| support | ||
| test_helper.exs | ||