{"action":"created","issue":{"url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/10","repository_url":"https://api.github.com/repos/JuliaShemplehova/Practice","labels_url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/10/comments","events_url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/10/events","html_url":"https://github.com/JuliaShemplehova/Practice/issues/10","id":326453354,"number":10,"title":"Task 12","user":{"login":"AntonGrigoriev","id":11048299,"avatar_url":"https://avatars2.githubusercontent.com/u/11048299?v=4","gravatar_id":"","url":"https://api.github.com/users/AntonGrigoriev","html_url":"https://github.com/AntonGrigoriev","followers_url":"https://api.github.com/users/AntonGrigoriev/followers","following_url":"https://api.github.com/users/AntonGrigoriev/following{/other_user}","gists_url":"https://api.github.com/users/AntonGrigoriev/gists{/gist_id}","starred_url":"https://api.github.com/users/AntonGrigoriev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AntonGrigoriev/subscriptions","organizations_url":"https://api.github.com/users/AntonGrigoriev/orgs","repos_url":"https://api.github.com/users/AntonGrigoriev/repos","events_url":"https://api.github.com/users/AntonGrigoriev/events{/privacy}","received_events_url":"https://api.github.com/users/AntonGrigoriev/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-05-25T09:44:02Z","updated_at":"2018-05-27T14:43:27Z","closed_at":null,"author_association":"NONE","body":"@JuliaShemplehova \r\n\r\n**Авторизация**\r\n* Одна из гланых задач авторизации - ограничение возможностей. Вы не хотите отдавать любые данные и позволять выполнять любые действия всем пользователям, а только лишь авторизованным. Сейчас, несмотря на настроенную авторизация, вы никак не ограничиваете пользователей. То есть, даже если пользователь не авторизован, он например может добавить пост (в обход клиента, воспользовавшись rest клиентом). Таким образом, для каждого такого запроса вам необходимо проверять авторизован ли пользователь."},"comment":{"url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/comments/392336276","html_url":"https://github.com/JuliaShemplehova/Practice/issues/10#issuecomment-392336276","issue_url":"https://api.github.com/repos/JuliaShemplehova/Practice/issues/10","id":392336276,"user":{"login":"AntonGrigoriev","id":11048299,"avatar_url":"https://avatars2.githubusercontent.com/u/11048299?v=4","gravatar_id":"","url":"https://api.github.com/users/AntonGrigoriev","html_url":"https://github.com/AntonGrigoriev","followers_url":"https://api.github.com/users/AntonGrigoriev/followers","following_url":"https://api.github.com/users/AntonGrigoriev/following{/other_user}","gists_url":"https://api.github.com/users/AntonGrigoriev/gists{/gist_id}","starred_url":"https://api.github.com/users/AntonGrigoriev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AntonGrigoriev/subscriptions","organizations_url":"https://api.github.com/users/AntonGrigoriev/orgs","repos_url":"https://api.github.com/users/AntonGrigoriev/repos","events_url":"https://api.github.com/users/AntonGrigoriev/events{/privacy}","received_events_url":"https://api.github.com/users/AntonGrigoriev/received_events","type":"User","site_admin":false},"created_at":"2018-05-27T14:43:27Z","updated_at":"2018-05-27T14:43:27Z","author_association":"NONE","body":"@JuliaShemplehova \r\n\r\n👍 \r\n\r\nЕдинственное, в случае неавторизованности пользователя, лучше отвечать с кодом 401."}}
{"actor":{"display_login":"AntonGrigoriev"}}