|
|
|
|
|
by oxidant
419 days ago
|
|
Think about what you would do in an unfamiliar project with no context and the ticket "please fix the authorization bug in /api/users/:id". You'd start by grepping the code base and trying to understand it. Compare that to, "fix the permission in src/controllers/users.ts in the function `getById`. We need to check the user in the JWT is the same user that is being requested" |
|