Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -153,7 +153,7 @@ This handler does two things:
1. For resource creation or modification, it adds the authenticated user's identity as the `owner` in that resource's metadata. This ensures that we can filter resources based on user identity.
2. It returns a filter dictionary that enforces access control on all operations (create, read, update, delete) on the resource, so only the owner can access it.

This means that even if a user has a valid JWT tokena and obtains another user's thread ID, they cannot:
This means that even if a user has a valid JWT token and obtains another user's thread ID, they cannot:

- View the thread's messages
- Add messages to the thread
Expand Down