c15bcd5634
Validation operations should require write permissions as they trigger
state-changing actions. Updated middleware for:
- POST /api/v1/cloud-tokens/{uuid}/validate
- GET /api/v1/servers/{uuid}/validate
Added tests to verify read-only tokens cannot access these endpoints.
|
||
|---|---|---|
| .. | ||
| api.php | ||
| channels.php | ||
| console.php | ||
| web.php | ||
| webhooks.php | ||