Closed
Description
I thought the RestWrite controller would check user's authentication data for each received request, but apparently it's not, and the validateAuthData
method is rarely called (only when the server detect a mutation in the authData passed in the request)
So in a case where a Facebook token expires for a user, as the validateAuthData
method is not called, the user is still seen as authenticated for Parse-Server.
It would be nice to have a way to reject the request with an authProvider specific error.
Metadata
Metadata
Assignees
Labels
No labels