Why is /get-users public exposing PII and how to disable it?

torchlight_jr · Feb 2024

Why is /get-users public and opening up so many information. Is casdoor supposed to be hidden behind a VPC?

Esp. name, email, phone numbers.

Moreover, is there a search api and pagination?

hsluoyz · Feb 2024

disable this in org page

Topic	Replies	Views	Activity
WebAuthn + TOTP MFA returns invalid_grant "NextMfa" error in OIDC apps Casdoor webauthn mfa oidc	5	59	20h
Does Casdoor support running as a Windows background service? Casdoor	1	51	4d
Where should users change their password or email address? Casdoor	1	47	Oct 8
Demo site unavailable and Google OAuth redirect_uri_mismatch error Casdoor bug oauth sso	3	41	Sep 28
How to set up grok on casbin-gateway? Casdoor	1	40	Sep 27