IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

FEATURE: basic UI to view user api keys

Browse Source
This commit is contained in:
Sam
2016-08-16 17:06:33 +10:00
parent b7cea24d76
commit 416e7e0d1e
12 changed files with 133 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
lib/auth/default_current_user_provider.rb
View File

@@ -177,7 +177,7 @@ class Auth::DefaultCurrentUserProvider
protected
def lookup_user_api_user(user_api_key)
if api_key = UserApiKey.where(key: user_api_key).includes(:user).first
if api_key = UserApiKey.where(key: user_api_key, revoked_at: nil).includes(:user).first
if !api_key.write && @env["REQUEST_METHOD"] != "GET"
raise Discourse::InvalidAccess
end