mirror of
https://github.com/discourse/discourse.git
synced 2024-12-11 23:13:48 +08:00
a3b01eaa62
Under some situations, we would inadvertently return a public (unauthenticated) result to an authenticated API request. This commit adds the `Api-Key` header to our anonymous cache bypass logic. |
||
---|---|---|
.. | ||
anonymous_cache.rb | ||
discourse_public_exceptions.rb | ||
enforce_hostname.rb | ||
missing_avatars.rb | ||
omniauth_bypass_middleware.rb | ||
request_tracker.rb | ||
turbo_dev.rb |