discourse/spec
Blake Erickson f03b293e6a
FEATURE: Header based auth for API requests (#7129)
Now you can also make authenticated API requests by passing the
`api_key` and `api_username` in the HTTP header instead of query params.

The new header values are: `Api-key` and `Api-Username`.

Here is an example in cURL:

``` text
curl -i -sS -X POST "http://127.0.0.1:3000/categories" \
  -H "Content-Type: multipart/form-data;" \
  -H "Api-Key: 7aa202bec1ff70563bc0a3d102feac0a7dd2af96b5b772a9feaf27485f9d31a2" \
  -H "Api-Username: system" \
  -F "name=7c1c0ed93583cba7124b745d1bd56b32" \
  -F "color=49d9e9" \
  -F "text_color=f0fcfd"
```

There is also support for `Api-User-Id` and `Api-User-External-Id`
instead of specifying the username along with the key.
2019-03-08 09:13:31 -07:00
..
components FEATURE: Header based auth for API requests (#7129) 2019-03-08 09:13:31 -07:00
fabricators FEATURE: Introduce Ignore user (#7072) 2019-02-27 14:49:07 +01:00
fixtures FEATURE: allow users to easily track/watch/mute topics via email 2019-03-06 18:38:49 +11:00
helpers FEATURE: add ability to clear previously set mobile_view with mobile_view=auto 2019-02-22 10:44:49 -08:00
import_export FIX: topic and category exporters were only exporting users who created the first post 2018-01-16 12:51:53 -05:00
integration FIX: When disagreeing with a flag that silenced a user, unsilence them 2019-02-08 08:50:50 -05:00
integrity FIX: Relative links in translations should work with subfolder 2018-11-08 23:31:05 +00:00
jobs REFACTOR: Migrate GoogleOAuth2Authenticator to use ManagedAuthenticator (#7120) 2019-03-07 11:31:04 +00:00
lib FEATURE: Calculate CSP based on active themes (#6976) 2019-02-11 12:32:04 +00:00
mailers FIX: Keep original subject in emails to staged users 2019-01-18 11:07:54 +01:00
models FIX: retranspile theme JS when settings YAML changes (#7131) 2019-03-08 17:49:06 +03:00
multisite DEV: Allow custom value when pausing sidekiq to aid in debugging. 2019-02-19 10:55:53 +08:00
requests REFACTOR: Migrate GoogleOAuth2Authenticator to use ManagedAuthenticator (#7120) 2019-03-07 11:31:04 +00:00
serializers FIX: WebhookPostSerializer spec failure 2019-03-06 09:48:20 +00:00
services REFACTOR: Migrate GoogleOAuth2Authenticator to use ManagedAuthenticator (#7120) 2019-03-07 11:31:04 +00:00
support FIX: logspam due to 404s on CSS files 2019-02-14 17:58:16 +11:00
tasks suppress print output when running specs 2017-10-31 16:06:11 +05:30
views/omniauth_callbacks FEATURE: Use translated name for 'your email has been authenticated by' (#6649) 2018-11-22 19:12:04 +00:00
rails_helper.rb DEV: Multisite tests didn't fail anymore 2019-01-24 22:28:00 +01:00