yujunjun/strapi
1
0
Fork 0
mirror of https://github.com/strapi/strapi.git synced 2025-07-28 11:30:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

disallow updating lastUsed from api

Browse Source
This commit is contained in:
Ben Irvin 2022-08-18 12:03:25 +02:00
parent 745a3a8497
commit c61e402461
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
packages/core/admin/server/controllers/api-token.js
View File

@ -86,6 +86,11 @@ module.exports = {
attributes.description = trim(body.description); attributes.description = trim(body.description);
} }
// Don't allow updating lastUsed time
if (has(attributes, 'lastUsed')) {
throw new ApplicationError('lastUsed cannot be updated');
}
await validateApiTokenUpdateInput(attributes); await validateApiTokenUpdateInput(attributes);
const apiTokenExists = await apiTokenService.getById(id); const apiTokenExists = await apiTokenService.getById(id);