modrinth / knossos

Our Vue-based frontend with server-side rendering and caching for great user experience, speed, and compatibility.

Home Page:https://modrinth.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Lack of authentication to view project settings

IThundxr opened this issue · comments

Describe the bug

modrinth.com//settings/* pages lack authentication/authentication redirection when accessing them from the link directly

Steps to reproduce

  1. visit https://modrinth.com/mod/numismatics/settings/members and be able to see all the members, alongside other info that should be gated behind logging in

Expected behavior

Redirect to login page requesting login before being able to view project settings

Additional context

No response

Any sensitive information is behind authentication on the backend. There's not really much of a reason to block people from seeing these pages, there is no way to access them through the UI.

I guess yeah