FEATURE: basic UI to view user api keys

This commit is contained in:
Sam
2016-08-16 17:06:33 +10:00
parent b7cea24d76
commit 416e7e0d1e
12 changed files with 133 additions and 4 deletions

View File

@ -177,7 +177,7 @@ class Auth::DefaultCurrentUserProvider
protected
def lookup_user_api_user(user_api_key)
if api_key = UserApiKey.where(key: user_api_key).includes(:user).first
if api_key = UserApiKey.where(key: user_api_key, revoked_at: nil).includes(:user).first
if !api_key.write && @env["REQUEST_METHOD"] != "GET"
raise Discourse::InvalidAccess
end