bug: don't allow unauthed access to /api/me

obot-platform · Oct 18, 2024 · b2f18fe · b2f18fe
1 parent 70959ad
commit b2f18fe
Showing 1 changed file with 0 additions and 2 deletions.
diff --git a/pkg/api/authz/authz.go b/pkg/api/authz/authz.go
@@ -30,8 +30,6 @@ var staticRules = map[string][]string{
 		// Allow access to the oauth2 endpoints
 		"/oauth2/",
 
-		"GET /api/me",
-
 		"POST /api/webhooks/{id}",
 		"GET /api/token-request/{id}",
 		"POST /api/token-request",