Open
Description
Why Is this Needed
Summary:
Some of the api (json) request on the api are not checking for csrftoken or request.user.is_authenticated making possible to fetch data from outside gitcoin.
Description
Type:
Current Behavior
Api exposed
Expected Behavior
We have a right list of our public api and secure the endpoints with sensitive data
Definition of Done
- Create a list of public endpoints
- Secure the endpoints we don't want to expose
Data Requirements
comment: # (How will we measure the success of this feature? What kind of tracking is needed for this feature (clicks, impressions, flag)?)