discourse/lib/auth
Blake Erickson d04ba4b3b2
DEPRECATION: Remove support for api creds in query params (#9106)
* DEPRECATION: Remove support for api creds in query params

This commit removes support for api credentials in query params except
for a few whitelisted routes like rss/json feeds and the handle_mail
route.

Several tests were written to valid these changes, but the bulk of the
spec changes are just switching them over to use header based auth so
that they will pass without changing what they were actually testing.

Original commit that notified admins this change was coming was created
over 3 months ago: 2db2003187

* fix tests

* Also allow iCalendar feeds

Co-authored-by: Rafael dos Santos Silva <xfalcox@gmail.com>
2020-04-06 16:55:44 -06:00
..
auth_provider.rb FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
authenticator.rb SECURITY: Add confirmation screen when connecting associated accounts 2019-07-24 10:28:15 +01:00
current_user_provider.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
default_current_user_provider.rb DEPRECATION: Remove support for api creds in query params (#9106) 2020-04-06 16:55:44 -06:00
discord_authenticator.rb FEATURE: Login with Discord (#8053) 2019-08-30 10:54:19 +01:00
facebook_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
github_authenticator.rb DEV: Apply Rubocop redundant return style 2019-11-14 15:10:51 -05:00
google_oauth2_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
instagram_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
managed_authenticator.rb UX: Ignore name parameter from IDP when it is equal to email (#8869) 2020-02-05 16:03:18 +00:00
oauth2_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
result.rb FIX: Do not raise exception if the authenticator email is missing 2019-08-14 12:08:59 +01:00
twitter_authenticator.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00