Skip to content

Auth Adapters could check for expired / invalid authentication when making a request #5085

Closed
@SebC99

Description

@SebC99

I thought the RestWrite controller would check user's authentication data for each received request, but apparently it's not, and the validateAuthData method is rarely called (only when the server detect a mutation in the authData passed in the request)

So in a case where a Facebook token expires for a user, as the validateAuthData method is not called, the user is still seen as authenticated for Parse-Server.
It would be nice to have a way to reject the request with an authProvider specific error.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions