IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-27 03:10:46 -06:00
Code Issues Packages Projects Releases Wiki Activity

FEATURE: support HEAD request to /user-api-key/new

Browse Source 
This allows us to cleanly sniff to find if it exists
This commit is contained in:
Sam 2016-08-17 09:58:19 +10:00
parent dc4799dda2
commit a25a8115e8
2 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
app/controllers/user_api_keys_controller.rb
View File

@ -6,7 +6,15 @@ class UserApiKeysController < ApplicationController
skip_before_filter :check_xhr, :preload_json skip_before_filter :check_xhr, :preload_json
before_filter :ensure_logged_in, only: [:create, :revoke, :undo_revoke] before_filter :ensure_logged_in, only: [:create, :revoke, :undo_revoke]
AUTH_API_VERSION ||= 1
def new def new
if request.head?
head :ok, auth_api_version: AUTH_API_VERSION
return
end
require_params require_params
validate_params validate_params
@ -31,7 +39,6 @@ class UserApiKeysController < ApplicationController
require_params require_params
unless SiteSetting.allowed_user_api_auth_redirects unless SiteSetting.allowed_user_api_auth_redirects
.split('|') .split('|')
.any?{|u| params[:auth_redirect] == u} .any?{|u| params[:auth_redirect] == u}

8
spec/controllers/user_api_keys_controller_spec.rb
View File

@ -44,6 +44,14 @@ TXT
} }
end end
context 'new' do
it "supports a head request cleanly" do
head :new
expect(response.code).to eq("200")
expect(response.headers["Auth-Api-Version"]).to eq("1")
end
end
context 'create' do context 'create' do
it "does not allow anon" do it "does not allow anon" do