Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug: Server owner is able to timeout themselves #376

Open
LazyCat2 opened this issue Oct 17, 2024 · 0 comments
Open

bug: Server owner is able to timeout themselves #376

LazyCat2 opened this issue Oct 17, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@LazyCat2
Copy link

What happened?

I've sent following request:

curl \
    -X PATCH \
    -H "X-Session-Token: $USER_TOKEN" \
    'https://api.revolt.chat/servers/$SERVER_ID/members/$USER_ID' \
    --data '{"timeout": "2024-10-17T16:20:41.638Z"}'

And it worked, I've got timed out on my own server.
I expected it to return 403 (Forbidden).
Also I can't send messages using revite because of client-side restriction, but I can do it by using API directly

@LazyCat2 LazyCat2 added the bug Something isn't working label Oct 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: 🆕 Untriaged
Development

No branches or pull requests

1 participant