discourse/app
David Taylor cfb6199a95
FIX: Don't redirect XHR/JSON requests when login is required (#15093)
When redirecting to login, we store a destination_url cookie, which the user is then redirected to after login. We never want the user to be redirected to a JSON URL. Instead, we should return a 403 in these situations.

This should also be much less confusing for API consumers - a 403 is a better representation than a 302.
2021-12-02 15:12:25 +00:00
..
assets DEV: Ensure redirects are passed through to the client by ember-cli (#15170) 2021-12-02 15:03:45 +00:00
controllers FIX: Don't redirect XHR/JSON requests when login is required (#15093) 2021-12-02 15:12:25 +00:00
helpers SECURITY: Remove ember-cli specific response from application routes (#15155) 2021-12-01 16:10:40 +00:00
jobs PERF: migrate normalized_emails in a migrations (#15166) 2021-12-02 15:08:22 +11:00
mailers DEV: Hash tokens stored from email_tokens (#14493) 2021-11-25 09:34:39 +02:00
models FIX: extract and fix overriding of usernames by external auth (#14637) 2021-12-02 17:42:23 +04:00
serializers FEATURE: ability to add description to tags (#15125) 2021-12-01 09:18:56 +11:00
services FIX: extract and fix overriding of usernames by external auth (#14637) 2021-12-02 17:42:23 +04:00
views SECURITY: Remove ember-cli specific response from application routes (#15155) 2021-12-01 16:10:40 +00:00