Skip to content

Conversation

craftxbox
Copy link

Attempts to follow most of the review feedback given aswell.

"""

def has_permission(self, request, view):
auth_header = request.headers.get("Authorization")
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I imagine you didn't like the X-Character-Token header. I think it was good to keep them separated and so we always know what we are talking about

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe only a minor thing however there's reasons not to put secrets in headers other than Authorization: https://stackoverflow.com/a/43164958/3934270

@craftxbox
Copy link
Author

tested as working from Postman

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants