fixed

app/controllers/api/v1/organizations/projects_controller.rb

@@ -35,4 +35,12 @@ class Api::V1::Organizations::ProjectsController < Api::V1::BaseController
         return false if current_user.admin?
         @organization.organization_extension.privacy? && @organization.organization_users.where(user_id: current_user.id).blank?
     end
+
+    def sort
+        Project.column_names.include?(params[:sort_by]) ? params[:sort_by] : 'updated_on'
+    end
+    
+    def sort_direction
+        %w(desc asc).include?(params[:sort_direction]) ? params[:sort_direction] : 'desc'
+    end
 end