From 5150053275594278e9eb23e72d98b16593c4c230 Mon Sep 17 00:00:00 2001 From: syuilo Date: Mon, 18 Dec 2023 12:32:26 +0900 Subject: fix(backend): add missing kind definition for admin endpoints to improve security --- packages/backend/src/server/api/endpoints/admin/invite/create.ts | 2 ++ packages/backend/src/server/api/endpoints/admin/invite/list.ts | 2 ++ 2 files changed, 4 insertions(+) (limited to 'packages/backend/src/server/api/endpoints/admin/invite') diff --git a/packages/backend/src/server/api/endpoints/admin/invite/create.ts b/packages/backend/src/server/api/endpoints/admin/invite/create.ts index c6ee45735e..96de772edc 100644 --- a/packages/backend/src/server/api/endpoints/admin/invite/create.ts +++ b/packages/backend/src/server/api/endpoints/admin/invite/create.ts @@ -16,6 +16,8 @@ import { ApiError } from '../../../error.js'; export const meta = { tags: ['admin'], + kind: 'write:admin', + requireCredential: true, requireModerator: true, diff --git a/packages/backend/src/server/api/endpoints/admin/invite/list.ts b/packages/backend/src/server/api/endpoints/admin/invite/list.ts index ff57940d48..3b7dc72e11 100644 --- a/packages/backend/src/server/api/endpoints/admin/invite/list.ts +++ b/packages/backend/src/server/api/endpoints/admin/invite/list.ts @@ -12,6 +12,8 @@ import { DI } from '@/di-symbols.js'; export const meta = { tags: ['admin'], + kind: 'write:admin', + requireCredential: true, requireModerator: true, -- cgit v1.2.3-freya