Ghost/core/server/services
Fabien O'Carroll 4e6a6a24ac Updated Admin API key auth to require kid in header (#10538)
* Required kid be a header claim as according to spec

https://tools.ietf.org/html/rfc7515#section-4.1.4 (JWT is an extension of JWS)

* Updated error message for missing kid

* Fixed admin-api key unit tests

* Fixed regression and acceptance tests
2019-02-26 11:03:47 +07:00
..
apps Updated blog site components to respect the api version 2018-10-18 19:41:07 +02:00
auth Updated Admin API key auth to require kid in header (#10538) 2019-02-26 11:03:47 +07:00
mail Updated docs links to best equivalents (#10386) 2019-01-17 06:57:37 +00:00
members Improved Members security and performance (#10511) 2019-02-23 04:47:42 +01:00
permissions Added v2 actions endpoint 2019-02-06 21:36:09 +01:00
routing Added support for serverside rendering of members content (#10522) 2019-02-25 17:03:27 +01:00
rss Fixed correct promise order in RSS feed generator (#9726) 2018-09-10 11:39:38 +02:00
settings Updated default-routes.yaml syntax to single template (#10459) 2019-02-06 14:34:57 +01:00
themes Added support for serverside rendering of members content (#10522) 2019-02-25 17:03:27 +01:00
url 🐛 Fixed filtering by primary_tag or primary_author in routes.yaml 2019-02-18 19:13:22 +01:00
webhooks Fixed webhook resource name for page events 2019-02-25 23:51:23 +01:00
labs.js Changed config endpoint for Admin API v2 2019-02-25 13:24:19 +01:00
slack.js Added Slack username option. (#10285) 2018-12-14 18:57:32 +07:00
xmlrpc.js 🐛 Fixed uncaught exceptions from image fetches 2019-01-15 20:35:46 +00:00