Error if exposed api workflow and custom event have the same name

  • I created a backend workflow that is exposed called validate-token.
  • Tested, it worked.
  • I then created a custom event with the same name.
  • It stopped working (404)
  • change name of custom event, it works.
  • make them the same, it stops working

This smells like the type of bug that can be exploited. Why would a custom event – an internal function – affect an external endpoint?

This topic was automatically closed after 14 days. New replies are no longer allowed.