6 Commits

Author	SHA1	Message	Date
Martin Brennan	e6f9504dd6	FEATURE: Allow user_status scope for UserApiKey (#19296) ... Follow-up to 6357a3ce33 where we allowed a general API key scope for user status GET/PUT/DELETE, this commit allows the same for the UserApiKey system.	2022-12-06 08:56:03 +10:00
David Taylor	abb00c3780	FIX: Restore users#topic_tracking_state route to api session_info scope (#10992) ... This route was inadvertently removed in 1cec333f, and is required for showing new/unread counts in Discourse mobile apps	2020-10-21 19:44:34 +01:00
David Taylor	b7c680853d	DEV: Introduce plugin API to contribute user api key scopes	2020-10-19 10:40:55 +01:00
David Taylor	23e5c605f6	DEV: Add support for allowed parameters in user api key scopes ... Initially, this feature is only intended for use in core/plugins, so there is no API for requesting a parameter-scoped key. That may change in future.	2020-10-19 10:40:55 +01:00
David Taylor	1cec333f48	REFACTOR: Introduce RouteMatcher class ... This consolidates logic used to match routes in ApiKey, UserApiKey and DefaultCurrentUserProvider. This reduces duplicated logic, and will allow UserApiKeysScope to easily re-use the parameter matching logic from ApiKeyScope	2020-10-19 10:40:55 +01:00
David Taylor	1ba9b34b03	DEV: Move UserApiKey scopes to dedicated table (#10704) ... This has no functional impact yet, but it is the first step in adding more granular scopes to UserApiKeys	2020-09-29 10:57:48 +01:00