Ghost/core/server/services
Fabien O'Carroll 3db102a776
Added API Key auth middleware to v2 content API (#10005)
* Added API Key auth middleware to v2 content API

refs #9865

- add `auth.authenticate.authenticateContentApiKey` middleware
  - accepts `?key=` query param, sets `req.api_key` if it's a known Content API key
- add `requiresAuthorizedUserOrApiKey` authorization middleware
  - passes if either `req.user` or `req.api_key` exists
- update `authenticatePublic` middleware stack for v2 content routes

* Fixed functional content api tests

no-issue

This fixes the functional content api tests so they use the content api
auth.

* Fixed context check and removed skip

* Updated cors middleware for content api

* Removed client_id from frame.context

no-issue

The v2 api doesn't have a notion of clients as we do not use oauth for it

* Fixed tests for posts input serializer
2018-10-15 16:23:34 +07:00
..
apps Fixed typo in: core/server/services/apps/index.js (#9673) 2018-06-11 23:19:07 +02:00
auth Added API Key auth middleware to v2 content API (#10005) 2018-10-15 16:23:34 +07:00
mail Changed http to https links 2018-08-16 12:13:24 +02:00
permissions Sorted out the mixed usages of include and withRelated (#9425) 2018-02-15 10:53:53 +01:00
routing 🐛Fixed sitemap duplicates after routes.yaml upload (#9957) 2018-10-08 10:29:21 +07:00
rss Fixed correct promise order in RSS feed generator (#9726) 2018-09-10 11:39:38 +02:00
settings Removed api integration tests (#9940) 2018-10-06 22:13:52 +02:00
themes Switched to eslint-plugin-ghost (#9835) 2018-09-17 20:49:30 +02:00
url Refactored method urlFor to use versionType instead of admin: true 2018-10-04 16:49:55 +05:30
labs.js Moved labs, auth, permissions, settings, mail, themes to services (#9339) 2017-12-14 03:01:23 +01:00
slack.js Changed http to https links 2018-08-16 12:13:24 +02:00
webhooks.js Import lib/common only 2017-12-12 10:28:13 +01:00
xmlrpc.js Fixed RPC pings (#9816) 2018-08-23 15:20:29 +02:00