torchlight_jr

Why is /get-users public and opening up so many information. Is casdoor supposed to be hidden behind a VPC?

Esp. name, email, phone numbers.

Moreover, is there a search api and pagination?

Thanks for the recommendation. In this case, I would need to implement a resource syncher from my backend to Casdoor, is that correct?

Hi awesome peoples. I have an nodejs api, it seems like casbin/prisma-adapter and casdoor both have role/resource/rule management. I am not sure where should I keep my rules.