Discuss Scratch
- Discussion Forums
- » Suggestions
- » Require authentication to load trash projects using the API
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
When a project is in the trash folder, external services can still access it using the API. I think we should make it so that the only person who can load a trashed project through the API, is someone who is currently logged in as the user who made the project. I'm not sure how easy this would be to implement, but it would stop people from viewing projects that were trashed using external sources.
There’s no point in a trashing system if there’s no difference between trash projects and unshared ones.
There’s no point in a trashing system if there’s no difference between trash projects and unshared ones.
Last edited by ScolderCreations (Nov. 16, 2021 14:50:55)
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- SonicFanX123_321
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
support. it'd be less intrusive.
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- Ciyob86
- Scratcher
500+ posts
Require authentication to load trash projects using the API
Support!, this should also be done with unshared projects.
Last edited by Ciyob86 (Aug. 1, 2021 17:24:28)
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
some people may want to share unshared projects with external services. Support!, this should also be done with unshared projects
- LankyBox01
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Wait, that exists?
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
can you be more specific? Wait, that exists?
- LankyBox01
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
You can actually access trashed projects using the API? Let me test it-can you be more specific? Wait, that exists?
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Yes, I know because Turbowarp can load projects that are currently in the trash.
- LankyBox01
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
I tried it, and it doesn't work. Let me inspect turbowarp's source code. Yes, I know because Turbowarp can load projects that are currently in the trash.
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
While people cannot access trash projects through the main site, they can still load the project file through the API.
- LankyBox01
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
I know that. While people cannot access trash projects through the main site, they can still load the project file through the API.
fetch('https://api.scratch.mit.edu/projects/(removed)/')
.then(response => response.json())
.then(data => console.log(data));
A deleted project of mine cannot be fetched
Last edited by LankyBox01 (July 31, 2021 19:36:33)
- LankyBox01
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Ah, i see the API issue. You can access literally any project, even if it's in the trash folder OR unshared.
https://projects.scratch.mit.edu/{PROJECT_ID}
All that needs to be changed is the projects.scratch.mit.edu api
https://projects.scratch.mit.edu/{PROJECT_ID}
All that needs to be changed is the projects.scratch.mit.edu api
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- ScolderCreations
- Scratcher
1000+ posts
Require authentication to load trash projects using the API
Bump
- Discussion Forums
- » Suggestions
- » Require authentication to load trash projects using the API