Very minor change due to issue #1204 - wasn't allowing unauthenticated requests through.

2021-02-27 10:15:05 +00:00 · 2021-02-27 10:15:05 +00:00 · 2b11f8adfa
parent c5e882b218
commit 2b11f8adfa
1 changed files with 2 additions and 5 deletions
--- a/packages/server/src/api/routes/webhook.js
+++ b/packages/server/src/api/routes/webhook.js
@ -40,10 +40,7 @@ router
    authorized(BUILDER),
    controller.buildSchema
  )
-  .post(
-    "/api/webhooks/trigger/:instance/:id",
-    authorized(PermissionTypes.WEBHOOK, PermissionLevels.EXECUTE),
-    controller.trigger
-  )
+  // this shouldn't have authorisation, right now its always public
+  .post("/api/webhooks/trigger/:instance/:id", controller.trigger)

 module.exports = router