Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-04 10:39:43 +08:00
Code Packages Activity Actions
discourse/db
History
Exact
Mark VanLandingham 7c82423416
 FIX: Prevent read-only keys being created without scopes (#42280) 
## Summary

Prevent read-only API keys from being created without scopes, which
previously granted them unscoped access. This was already enforced for
Api keys created via the UI. The fix enforces a mandatory 'global:read'
scope for read-only keys at the model and API levels, and includes a
migration to revoke existing invalid keys.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1192
2026-08-03 15:45:48 -05:00
..
fixtures FIX: Do not notify new sites or plugins enabled of old upcoming changes (#42045) 2026-07-30 09:51:08 +10:00
migrate FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00
post_migrate FEATURE: Make the message send shortcut a core user option (#42105) 2026-07-28 13:58:12 -07:00
api_test_seeds.rb
structure.sql FIX: Prevent read-only keys being created without scopes (#42280) 2026-08-03 15:45:48 -05:00