evo/evoleasing-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security audit fixes: task ID 12: remove /api/account/token/ method

Browse Source
This commit is contained in:
merelendor 2024-11-30 11:32:11 +00:00
parent 444da1fddf
commit 0e3fe5fd8a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
api/index.php
View File

@ -2598,12 +2598,14 @@ switch($PARAM_1)
{ {
switch($PARAM_2) switch($PARAM_2)
{ {
/* DEPRECATED & DISABLED due to security reasons
case "token": case "token":
{ {
print \Bitrix\Main\Web\JWT::encode(["acc_number" => $REQ['acc_number']], $secret, 'HS256', null, null); print \Bitrix\Main\Web\JWT::encode(["acc_number" => $REQ['acc_number']], $secret, 'HS256', null, null);
die(); die();
} }
break; break;
*/
case "recovery": case "recovery":
{ {