![]() The practical effect of this commit is to make the API check the Rails session cookie for authentication details. If the cookie is present and valid, it will be used to authenticate. The API now has several authentication options for users. They follow in this order of precedence: * Authentication token * Personal access token * OAuth2 Bearer token (Doorkeeper - application access) * Rails session cookie |
||
---|---|---|
.. | ||
config | ||
controllers | ||
factories | ||
features | ||
finders | ||
fixtures | ||
helpers | ||
initializers | ||
javascripts | ||
lib | ||
mailers | ||
models | ||
policies | ||
requests | ||
routing | ||
services | ||
support | ||
tasks/gitlab | ||
uploaders | ||
views | ||
workers | ||
factories_spec.rb | ||
rails_helper.rb | ||
simplecov_env.rb | ||
spec_helper.rb | ||
teaspoon_env.rb |