4 Commits

Author	SHA1	Message	Date
kirrg001	3f758c6a0a	Protected against empty admin api key ... refs #9865	2019-01-18 17:54:04 +01:00
kirrg001	1b5b95e198	Renamed authenticateAdminApiKey to authenticate for admin api key auth ... refs #9865 - the outer authentication layer wants a consistent interface of each authentication package - admin.authenticate - session.authenticate - furthermore, there is no need to put the full feature into the exposed function name	2019-01-18 17:30:07 +01:00
kirrg001	462865981e	Updated admin api key authentication to expect api key id in payload ... refs #9865 - see https://github.com/TryGhost/Ghost/blob/2.11.1/core/server/lib/members/index.js#L52 - consistency	2019-01-18 17:22:19 +01:00
Fabien O'Carroll	1c56221d80	Added API Key auth middleware to v2 Admin API (#10006) ... refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes	2019-01-18 12:45:06 +00:00