mirror of
https://github.com/discourse/discourse.git
synced 2025-01-19 11:22:47 +08:00
6230f5c554
This refactors default_current_user_provider in a few ways: - Introduce a generic `api_parameter_allowed?` method which checks for whitelisted routes/formats - Only read the api_key parameter on allowed routes. It is now completely ignored on other routes (previously it would raise a 403) - Start reading user_api_key parameter on allowed routes - Refactor tests as end-end integration tests A plugin API for PARAMETER_API_PATTERNS will be added soon |
||
|---|---|---|
| .. | ||
| auth_provider.rb | ||
| authenticator.rb | ||
| current_user_provider.rb | ||
| default_current_user_provider.rb | ||
| discord_authenticator.rb | ||
| facebook_authenticator.rb | ||
| github_authenticator.rb | ||
| google_oauth2_authenticator.rb | ||
| instagram_authenticator.rb | ||
| managed_authenticator.rb | ||
| oauth2_authenticator.rb | ||
| result.rb | ||
| twitter_authenticator.rb | ||