Switch passing invitation token from path to url.Values (#115)

`invitations/INV/TOKEN` becomes `invitations/INV?token=TOKEN` This fixes RBAC where the token was seen as a sub-resource.
appuio · Mar 3, 2023 · 8c70dc0 · 8c70dc0
1 parent af5cae1
commit 8c70dc0
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/apiserver/user/invitation_redeem.go b/apiserver/user/invitation_redeem.go
@@ -41,8 +41,7 @@ func (ir *invitationRedeemer) ConnectMethods() []string {
 }
 
 func (ir *invitationRedeemer) NewConnectOptions() (runtime.Object, bool, string) {
-	// Adds the token from the path to the options under the field "token"
-	return &userv1.RedeemOptions{}, true, "token"
+	return &userv1.RedeemOptions{}, false, ""
 }
 
 // Connect implements the REDEEM method for invitations.