fix: somes sec fixes (#927)

* fix: ressource inutile ici * fix: destructuration à revoir * chore: cleaning
mission-apprentissage · Dec 18, 2023 · 58503ed · 58503ed
1 parent 5039ca9
commit 58503ed
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 5 deletions.
diff --git a/server/src/services/formulaire.service.ts b/server/src/services/formulaire.service.ts
@@ -69,7 +69,7 @@ export const getOffreAvecInfoMandataire = async (id: string | ObjectId): Promise
  * @param {number} payload.limit
  */
 export const getFormulaires = async (query: FilterQuery<IRecruiter>, select: object, { page, limit }: { page?: number; limit?: number }) => {
-  const response = await Recruiter.paginate({ query, ...select, page, limit, lean: true })
+  const response = await Recruiter.paginate({ query, select, page, limit, lean: true })
 
   return {
     pagination: {

diff --git a/shared/routes/formulaire.route.ts b/shared/routes/formulaire.route.ts
@@ -34,9 +34,7 @@ export const zFormulaireRoute = {
       securityScheme: {
         auth: "access-token",
         access: null,
-        resources: {
-          recruiter: [{ establishment_id: { type: "params", key: "establishment_id" } }],
-        },
+        resources: {},
       },
     },
     "/formulaire/offre/f/:jobId": {

diff --git a/shared/routes/v1Jobs.routes.ts b/shared/routes/v1Jobs.routes.ts
@@ -61,7 +61,7 @@ export const zV1JobsRoutes = {
     "/v1/jobs/bulk": {
       method: "get",
       path: "/v1/jobs/bulk",
-      // TODO_SECURITY_FIX il faut faire quelque chose car sinon nous allons claquer des fesses
+      // TODO_SECURITY_FIX
       querystring: z
         .object({
           query: z