You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Client Keys aren't enforced even when defined #1733
Setup a Parse Server with applicationId, masterKey, and at least one of the client keys (rest api, dot net, or client key). In this case, set the restAPIKey.
Issue a request with the headers X-Parse-Application-Id and X-Parse-Rest-API-Key.
See that the request succeeded
Now, replace the original value used on X-Parse-Rest-API-Key with Bananas
The ReadMe states that:
Setting any of these keys will require all requests to provide one of the configured keys.
However, if you try to reproduce it with the steps above, you will see that the keys aren't really enforced, even when a few of them are being defined when Parse Server is initialized. When running the same request with the same headers, but pointing to api.parse.com/1, the result is {"error": "unauthorized"}.
Activity
drew-gross commentedon May 17, 2016
Closing to avoid duplicating discussion as we are discussing stuff in #1789.
If you have a good use case for client keys and think we should keep them, please post it there.
natanrolnik commentedon May 18, 2016
I initially posted here, but then I realized I should post on #1789 😁