Code

API Authentication#285

Code

Merged

elegaanz merged 13 commits intomasterPlume-org/Plume:masterfrom api-authPlume-org/Plume:api-authCopy head branch name to clipboardOct 30, 2018

+489-18

Commits

Commits on Oct 21, 2018

• Add a model for external apps

  Show description for 95ebf57
  elegaanz

  committed
  95ebf57

  Copy full SHA for 95ebf57

• Add an API endpoint to register apps

  elegaanz

  committed
  ac4bca3

  Copy full SHA for ac4bca3

Commits on Oct 22, 2018

• Add an ApiToken model, and an endpoint to get one

  elegaanz

  committed
  c845551

  Copy full SHA for c845551

• Disable CSRF for the whole API

  elegaanz

  committed
  2a98251

  Copy full SHA for 2a98251

• impl FromRequest for ApiToken

  Show description for 056f4fd
  elegaanz

  committed
  056f4fd

  Copy full SHA for 056f4fd

• Document API authentication and apps API

  elegaanz

  committed
  3629710

  Copy full SHA for 3629710

Commits on Oct 23, 2018

• New request guard: Authorization<Action, Scope>

  Show description for 4249f5c
  elegaanz

  committed
  4249f5c

  Copy full SHA for 4249f5c

• AppEndpoint.name is required for both the client and server

  elegaanz

  committed
  21f4c9d

  Copy full SHA for 21f4c9d

• Make it impossible to know if an username is used or not with the API

  elegaanz

  committed
  a1a062d

  Copy full SHA for a1a062d

• Use the full URL to refer to the Apps API

  Show description for 8e4ab95
  

  trinity-1686a

  and

  elegaanz

  committed
  8e4ab95

  Copy full SHA for 8e4ab95

Commits on Oct 25, 2018

• Use PhantomData intead of two Options useless for Authorization

  Show description for 1a2ad8d
  elegaanz

  committed
  1a2ad8d

  Copy full SHA for 1a2ad8d

Commits on Oct 29, 2018

• ApiToken: rename what to scope

  elegaanz

  committed
  827026a

  Copy full SHA for 827026a

Commits on Oct 30, 2018

• Make Authorization optional for read routes

  Show description for 0006bdf
  elegaanz

  committed
  0006bdf

  Copy full SHA for 0006bdf