discourse/lib/tasks/api.rake

# frozen_string_literal: true

desc "generate a master api key with given description"
task "api_key:create_master", [:description] => :environment do |task, args|
  raise "Supply a description for the key" if !args[:description]
  api_key = ApiKey.create!(description: args[:description])

  puts api_key.key
end
DEV: enable frozen string literal on all files This reduces chances of errors where consumers of strings mutate inputs and reduces memory usage of the app. Test suite passes now, but there may be some stuff left, so we will run a few sites on a branch prior to merging 2019-05-02 18:17:27 -04:00			`# frozen_string_literal: true`

FEATURE: Hash API keys in the database (#8438) API keys are now only visible when first created. After that, only the first four characters are stored in the database for identification, along with an sha256 hash of the full key. This makes key usage easier to audit, and ensures attackers would not have access to the live site in the event of a database leak. This makes the merge lower risk, because we have some time to revert if needed. Once the change is confirmed to be working, we will add a second commit to drop the `key` column. 2019-12-12 06:45:00 -05:00			`desc "generate a master api key with given description"`
			`task "api_key:create_master", [:description] => :environment do \|task, args\|`
FIX: Update api_key rake task for recent changes New usage: ``` rake api_key:get_or_create_master["Onboarding Key"] ``` 2019-11-08 18:34:15 -05:00			`raise "Supply a description for the key" if !args[:description]`
FEATURE: Hash API keys in the database (#8438) API keys are now only visible when first created. After that, only the first four characters are stored in the database for identification, along with an sha256 hash of the full key. This makes key usage easier to audit, and ensures attackers would not have access to the live site in the event of a database leak. This makes the merge lower risk, because we have some time to revert if needed. Once the change is confirmed to be working, we will add a second commit to drop the `key` column. 2019-12-12 06:45:00 -05:00			`api_key = ApiKey.create!(description: args[:description])`
rake task to generate api_key 2013-09-10 02:02:26 -04:00
FIX: Update api_key rake task for recent changes New usage: ``` rake api_key:get_or_create_master["Onboarding Key"] ``` 2019-11-08 18:34:15 -05:00			`puts api_key.key`
rake task to generate api_key 2013-09-10 02:02:26 -04:00			`end`