SECURITY CHANGES in Version 6.2.9

After a 'pentest' we have seen that a lot of API developers are not using the API in the most secure way.
To obligate these developers to work secure we have made some changes in the core of our API.

Object Route Description
Authentication Route
 N/A
 URL authentication is deprecated, use body POST for email_id and password.
apitoken
 N/A
 Passing apitoken in URL is deprecated, use header instead.
authtoken
 N/A
 Passing authtoken in URL is deprecated, use header instead.
JSONString
 N/A
 Passing JSONString in URL will be deprecated in next version, use body instead.

NEW in Version 6.2.9

Object Route Description
Default Contracts
 GET organizations/{organization_id}/contracts/default
 List default contracts.
Default Contracts
 GET organizations/{organization_id}/contracts/default/{contract_id}
 Get detail default contract.
Default Contracts
 POST organizations/{organization_id}/contracts/default/{contract_id}/clone
 Clone a default contract to own organization. It is not possible to create a blank contract.
Organization Contracts
 GET organizations/{organization_id}/contracts
 List contracts for an organization.
Organization Contracts
 GET contracts/{contract_id}
 Get details contract from an organization.
Organization Contracts
 POST contracts/{contract_id}/active
 Activate contract.
Organization Contracts
 POST contracts/{contract_id}/inactive
 Inactivate contract.
Organization Contracts
 PUT contracts/{contract_id}
 Update contract.
Organization Contracts
 GET contracts/{contract_id}/sample
 Sample Merge contract.
Organization
 POST organizations/{organization_id}/esign-on
 Enable e-signing for organization.
Organization
 POST organizations/{organization_id}/esign-off
 Disable e-signing for organization.
Organization Esign Settings
 GET organizations/{organization_id}/contracts/settings
 List esign settings for organization.
Organization Esign Settings
 PUT organizations/{organization_id}/contracts/settings
 Update esign settings for organization.
Organization Logo
 GET organizations/{organization_id}/logo
 Get logo for organization.
Organization Logo
 PUT organizations/{organization_id}/logo
 Update logo for organization.
Default Riskanalyzes
 GET organizations/{organization_id}/riskanalyzes/default
 List default riskanalyzes.
Default Riskanalyzes
 GET organizations/{organization_id}/riskanalyzes/default/{riskanalyse_id}
 Get detail default riskanalyzes.
Default Riskanalyzes
 POST organizations/{organization_id}/riskanalyzes/default/{riskanalyse_id}/clone
 Clone a default riskanalyzes to own organization. It is not possible to create a blank riskanalyze.
School Riskanalyzes
 GET organizations/{organization_id}/riskanalyzes
 Get riskanalyzes for an organization.
School Riskanalyzes
 GET riskanalyzes/{riskanalyse_id}
 Get details riskanalyzes from an organization.
School Riskanalyzes
 POST riskanalyzes/{riskanalyse_id}/active
 Activate riskanalyzes.
School Riskanalyzes
 POST riskanalyzes/{riskanalyse_id}/inactive
 Inactivate riskanalyzes.
School Riskanalyzes
 PUT riskanalyzes/{riskanalyse_id}
 Update riskanalyzes.
School Riskanalyzes
 GET riskanalyzes/{riskanalyse_id}/sample
 Sample Merge riskanalyzes.
Internships
 POST internships/{internship_id}/documents/contracts
 Add a contract to an internship.
Internships
 DELETE internships/{internship_id}/documents/contracts
 Unlink contract from an internship.
Internships
 PUT internships/{internship_id}/documents/riskanalyzes
 Add multiple riskanalyzes to an internship.
Internships
 DELETE V1/internships/{internship_id}/documents/riskanalyzes
 Remove multiple riskanalyzes from an internship.
Internships
 POST internships/{internship_id}/documents/esign
 Start Esign process for an internship.

CHANGED in Version 6.2.9

Object Route Description
Organization
 GET organizations/{organization_id}
 Get details for organization.
New fields: esign indicates the esign status for organization.
Internships Processing
 GET internships/{internship_id}/filter/by_geolocation
 Filter Internships by geolocation.
New fields: esign indicates the esign status for school.
Internships
 GET internships/{internship_id}
 Get deails for an internship. New fields:
contract_id the id for the linked contract.
riskanalyses array of ids for the linked riskanalyzes.
esign_errors array of error messages esign status.
esign_status indicates the status for esign process.

DEPRECATED in Version 6.2.9

Object Route Description