mirror of
https://github.com/discourse/discourse.git
synced 2025-05-24 14:12:10 +08:00

Under some situations, we would inadvertently return a public (unauthenticated) result to an authenticated API request. This commit adds the `Api-Key` header to our anonymous cache bypass logic.