GET api.launchpad.net/1.0/ doesn't check OAuth validity
Bug #877913 reported by
Martin Pool
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Launchpad itself |
Triaged
|
Low
|
Unassigned |
Bug Description
If you request api.launchpad.
I think Launchpad ought to either:
- refuse everything with invalid oauth or
- treat it as being unauthenticated
To post a comment you must log in.
WADL is now served from Apache, so it's a little difficult to verify the token.