Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
Code Packages Activity Actions
discourse/spec
History
Exact
Mark VanLandingham 7c82423416
 FIX: Prevent read-only keys being created without scopes (#42280) 
## Summary

Prevent read-only API keys from being created without scopes, which
previously granted them unscoped access. This was already enforced for
Api keys created via the UI. The fix enforces a mandatory 'global:read'
scope for read-only keys at the model and API levels, and includes a
migration to revoke existing invalid keys.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1192
2026-08-03 15:45:48 -05:00
..
db
fabricators FEATURE: Allow suspending and silencing users from the review queue (#42205) 2026-07-31 14:47:40 +02:00
fixtures DEV: Add image-processing regression coverage (#42117) 2026-07-30 15:28:07 +08:00
generator
helpers UX: Hide signup when the site is in read only or staff only mode (#42101) 2026-07-28 20:05:04 +02:00
import_export
initializers FIX: Do not notify new sites or plugins enabled of old upcoming changes (#42045) 2026-07-30 09:51:08 +10:00
integration FIX: store method in route matcher (#41512) 2026-07-07 11:49:56 -04:00
integrity DEV: hide and disable upcoming changes for disabled plugins (#41657) 2026-07-16 14:35:20 +04:00
jobs FIX: Clear disabled/deleted ProblemChecks automatically (#42243) 2026-07-31 21:18:28 +01:00
lib FIX: Enforce public profile visibility in Guardian (#42274) 2026-08-03 13:59:32 -05:00
mailers DEV: remove simple email subject upcoming change metadata (#41807) 2026-07-20 14:43:00 +04:00
migrations
models FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00
multisite
queries/reports FEATURE: Change default upcoming change promotion status to Beta (#41275) 2026-07-06 09:13:37 +10:00
requests FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00
script DEV: Fix UC status report when reverted files encountered (#41821) 2026-07-20 16:37:35 +10:00
serializers DEV: External IDs, and hidden groups to admins only. Allow moderators to see SSO when the moderators_view_sso_details site setting is enabled (#41496) 2026-08-03 11:25:34 -05:00
services FIX: Clear disabled/deleted ProblemChecks automatically (#42243) 2026-07-31 21:18:28 +01:00
support DEV: Add image-processing regression coverage (#42117) 2026-07-30 15:28:07 +08:00
system DEV: simplify and use reuable components in invite modal, fix bug, (#42273) 2026-08-03 15:31:55 -04:00
tasks DEV: Prefer RSpec primitives for test setup (#42122) 2026-07-30 11:17:22 +08:00
views
rails_helper.rb DEV: Prefer RSpec primitives for test setup (#42122) 2026-07-30 11:17:22 +08:00
regenerate_swagger_docs
swagger_helper.rb