Dosu Logo
Home
Documents
authentication_cleanup
authentication_cleanup
Type
External
Status
Published
Created
Feb 27, 2026
Updated
Feb 27, 2026

Authentication Cleanup Task List for Web API Endpoints#

This checklist tracks endpoints in app/api/v1/endpoints/web/ that require authentication/authorization review or fixes.

This should be mostly completed, but just needs to be verified and tests need to be updated or added to ensure that the authentication/authorization is working as expected.

Context: This checklist was generated from a full audit of all web endpoints in app/api/v1/endpoints/web/*. Endpoints listed here are missing authentication/authorization or have TODOs in code. When returning to this task:

  • Re-audit for any new endpoints and check for consistent use of Depends(get_current_user) and permission checks.
  • Reference the architecture/core-concepts and code/error-handling rules for required auth patterns.
  • Mark off each item as you implement or verify auth.
  • If unsure about an endpoint, check for project/user context and sensitive data exposure.
  • This list is not exhaustive if new endpoints have been added since this audit.
  • Last audit: 2024-06-21.

Attacks (attacks.py)#

  • /api/v1/web/attacks/{attack_id}/duplicate — TODO: Add authentication/authorization
  • /api/v1/web/attacks/bulk (DELETE) — TODO: Add authentication/authorization
  • /api/v1/web/attacks/{attack_id}/export — TODO: Add authentication/authorization
  • /api/v1/web/attacks/{attack_id} (PATCH) — TODO: Add authentication/authorization
  • /api/v1/web/attacks (POST) — TODO: Add authentication/authorization

Campaigns (campaigns.py)#

  • /api/v1/web/campaigns/{campaign_id}/export — TODO: Add authentication/authorization

Live Feeds (live.py)#

  • All SSE endpoints (/api/v1/web/live/*) — JWT authentication implemented

General#

  • Review all endpoints for consistent use of Depends(get_current_user) and project/user permission checks.
  • Ensure all endpoints that mutate or expose sensitive data are protected.

How to use:

  • Check off each item as authentication/authorization is implemented or verified.
  • Add new endpoints as needed during development.
  • Reference this file in PRs related to authentication fixes.