Author | SHA1 | Message | Date |
---|---|---|---|
|
74845bbea0 |
Fix #5226 by adding CSRF checking to api reqToken and add CSRF to the POST header for deadline (#5250)
* Add CSRF checking to reqToken and place CSRF in the post for deadline creation Fixes #5226, #5249 * /api/v1/admin/users routes should have reqToken middleware |
6 years ago |
|
7472c4a543 |
feat(repo): support search repository by topic name (#4505)
* feat(repo): support search repository by topic name |
6 years ago |
|
e827cc6ca9 | Enforce token on api routes [fixed critical security issue #4357] (#4840) | 6 years ago |
|
7c03def5f4 | Add sudo functionality to the API (#4809) | 6 years ago |
|
20952f1c5f |
Delete a user's public key via admin api (closes #3014) (#3059)
* Delete a user's public key via admin api * Test admin ssh endpoint for creating a new ssh key * Adapt public ssh key test to also test the delete operation * Test that deleting a missing key will result in a 404 * Test that a normal user can't delete another user's ssh key * Make DeletePublicKey return err * Update swagger doc |
7 years ago |