I want to hack a script that routes incoming mails @association.org from the server to the private mail accounts of the association members. I assume that all members have a forum account and want to reuse the already approved mail address from the forum db.
I checked the data that is returned from the forum API for a given username, but I cannot find the mail address. How do I get it?
I tried and I just get a html page saying content would not exist or is private. I used the api key generated for all users and the api_user system or the username of my admin account.
The point of that being non-GET is that it causes a staff action log, so it shouldn’t be triggereable from an img or an idempotent request retry thing.