Ghost/ghost/members-api/lib
Naz 02a0fd5a32 Fixed source attribution for staff token API requests
closes https://github.com/TryGhost/Toolbox/issues/386

- When the API request was made using staff token the source attribution was "user" instead of "api". Misattribution caused ripple effects in  limit service.
- The fix also adds a new combination of data available on the  `req` object - both `user` and `api_key` can be present when the request is done using a staff (user) token. Having both pieces of data on the request object gives more context for business logic, did not find a good reason to keep it "pure" with either `api_key` or `user` property.
2022-08-23 14:38:46 +08:00
..
controllers Allowed comped members to go through checkout flow 2022-08-19 20:55:31 +05:30
repositories Fixed source attribution for staff token API requests 2022-08-23 14:38:46 +08:00
services Added member attribution to member details page (#15266) 2022-08-19 16:39:18 -04:00
MembersAPI.js Added member attribution to member details page (#15266) 2022-08-19 16:39:18 -04:00