discourse/spec
David Taylor 6230f5c554
FEATURE: Allow parameter authentication for UserApiKeys (#9742)
This refactors default_current_user_provider in a few ways:
- Introduce a generic `api_parameter_allowed?` method which checks for whitelisted routes/formats
- Only read the api_key parameter on allowed routes. It is now completely ignored on other routes (previously it would raise a 403)
- Start reading user_api_key parameter on allowed routes
- Refactor tests as end-end integration tests

A plugin API for PARAMETER_API_PATTERNS will be added soon
2020-05-12 13:35:36 +01:00
..
components FEATURE: Allow parameter authentication for UserApiKeys (#9742) 2020-05-12 13:35:36 +01:00
fabricators FEATURE: Include optimized thumbnails for topics (#9215) 2020-05-05 09:07:50 +01:00
fixtures FEATURE: Include category position when exporting categories (#9658) 2020-05-07 12:17:15 +10:00
helpers DEV: Fix some more flaky tests (#9384) 2020-04-08 12:46:43 +02:00
import_export FEATURE: Rake task to export groups (#9450) 2020-04-17 14:59:54 -07:00
initializers FIX: We need to skip users with associated reviewables when auto-approving (#9080) 2020-03-02 14:33:52 -05:00
integration FEATURE: Allow parameter authentication for UserApiKeys (#9742) 2020-05-12 13:35:36 +01:00
integrity DEV: Improve flaky time-sensitive specs (#9141) 2020-03-10 22:13:17 +01:00
jobs DEV: Remove all code referencing at_desktop bookmark reminders (#9650) 2020-05-06 15:22:43 +10:00
lib FIX: Do not allow null options for bookmark manager 2020-05-08 15:24:59 +00:00
mailers DEV: Add rubocop-rspec (#9288) 2020-03-27 17:35:40 +01:00
models FIX: saving drafts unconditionally increases sequence 2020-05-12 16:55:42 +10:00
multisite FIX: Change secure media to encompass attachments as well (#9271) 2020-03-26 07:16:02 +10:00
requests FEATURE: Allow parameter authentication for UserApiKeys (#9742) 2020-05-12 13:35:36 +01:00
script/import_scripts FIX: Change base importer to create new Bookmark records (#9603) 2020-05-01 11:34:55 +10:00
serializers FEATURE: Include optimized thumbnails for topics (#9215) 2020-05-05 09:07:50 +01:00
services FIX: correct edit notification username for PMs (#9649) 2020-05-07 07:52:21 +10:00
support DEV: Use response.parsed_body in specs (#9615) 2020-05-07 17:04:12 +02:00
tasks FEATURE: Promote bookmarks with reminders to core functionality (#9369) 2020-04-22 13:44:19 +10:00
views/omniauth_callbacks FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
rails_helper.rb DEV: upgrade Rails 2020-04-20 12:55:53 +01:00
swagger_helper.rb DEV: Add rswag to aid in api documention (#9546) 2020-04-27 16:40:07 -06:00