Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
Code Packages Activity Actions
discourse/app
History
Exact
Mark VanLandingham 7c82423416
 FIX: Prevent read-only keys being created without scopes (#42280) 
## Summary

Prevent read-only API keys from being created without scopes, which
previously granted them unscoped access. This was already enforced for
Api keys created via the UI. The fix enforces a mandatory 'global:read'
scope for read-only keys at the model and API levels, and includes a
migration to revoke existing invalid keys.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1192
2026-08-03 15:45:48 -05:00
..
assets DEV: simplify and use reuable components in invite modal, fix bug, (#42273) 2026-08-03 15:31:55 -04:00
controllers FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00
helpers FEATURE: Allow selection of multiple content languages when viewing topics and posts (#42128) 2026-07-30 12:19:44 +08:00
jobs FIX: Clear disabled/deleted ProblemChecks automatically (#42243) 2026-07-31 21:18:28 +01:00
mailers
models FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00
queries/reports DEV: Remove reporting_improvements upcoming change (#41259) 2026-07-01 07:52:02 +08:00
serializers DEV: External IDs, and hidden groups to admins only. Allow moderators to see SSO when the moderators_view_sso_details site setting is enabled (#41496) 2026-08-03 11:25:34 -05:00
services FIX: Enforce per-section sidebar link cap on partial sidebar section updates (#42277) 2026-08-03 14:52:12 -05:00
views FIX: Prevent browsers from restoring stale documents in bfcache mode (#42207) 2026-07-31 17:24:47 +02:00