mirror of
https://github.com/discourse/discourse.git
synced 2026-08-04 10:39:43 +08:00
7c82423416## Summary Prevent read-only API keys from being created without scopes, which previously granted them unscoped access. This was already enforced for Api keys created via the UI. The fix enforces a mandatory 'global:read' scope for read-only keys at the model and API levels, and includes a migration to revoke existing invalid keys. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1192 |
||
|---|---|---|
| .. | ||
| environments | ||
| imagemagick | ||
| initializers | ||
| locales | ||
| application.rb | ||
| boot.rb | ||
| cdn.yml.sample | ||
| database.yml | ||
| deploy.rb.sample | ||
| dev_defaults.yml | ||
| discourse.config.sample | ||
| discourse.pill.sample | ||
| discourse_defaults.conf | ||
| environment.rb | ||
| logrotate.conf | ||
| multisite.yml.production-sample | ||
| nginx.sample.conf | ||
| official_plugins.json | ||
| pitchfork.conf.rb | ||
| projections.json | ||
| routes.rb | ||
| sidekiq.yml | ||
| site_settings.yml | ||
| spring.rb | ||
| thin.yml.sample | ||
| unicorn_launcher | ||
