3 commits

Author	SHA1	Message	Date
Cindy Pallares	fe5f75930e	Merge branch 'security-fix-pat-web-access' into 'master' ... [master] Resolve "Personal access token with only `read_user` scope can be used to authenticate any web request" See merge request gitlab/gitlabhq!2583	2018-11-28 19:13:59 -05:00
Bob Van Landuyt	c443133e77	Handle exceptions outside the GraphQL schema ... This allows us to report JSON parse exceptions to clients and ignore them in sentry.	2018-06-05 20:47:42 +02:00
Nick Thomas	9c6c17cbcd	Add a minimal GraphQL API	2018-06-05 20:47:42 +02:00