Other users' activities being returned on /me/activities endpoint

[dewhaskins]

Title: /me/activities returns activities that do not belong to the authenticated user

Issue found of: September 20th, 2020

Endpoint(s):

• GET /me/activities

Scope(s):

• OAuth 2 access token

Steps to reproduce:

curl --request GET \
  --url 'https://api.soundcloud.com/me/activities'

Expected behaviour:

A collection of activities should be returned that all belong to the authenticated user

Actual behaviour:

A collection of activities is returned but only some belong to the authenticated user - most are other users' activities. This also affects the /me/activities/all/own endpoint

[dewhaskins]

I had a closer look at this and it appears that the endpoint is returning activities from other users that the authenticated user follows, as well as their own activities

[youssefhassan]

I will look into this, can you share your app name or username that created the app to debug the issue? thanks for reporting

[dewhaskins]

I will look into this, can you share your app name or username that created the app to debug the issue? thanks for reporting

Thanks, app name is SC Assistant