Skip to content

fix(server): include avatar route in jwt authed scope

Sebastian K requested to merge fix/protect-avatar-route into milestone-1.35

closes #275

  • also authenticate /public (avatars) using token from header
  • use whitelisting approach for routes when applying jwt-auth

Merge request reports