798b4bb604
Under some situations, we would inadvertently return a public (unauthenticated) result to an authenticated API request. This commit adds the `Api-Key` header to our anonymous cache bypass logic. |
||
|---|---|---|
| .. | ||
| anonymous_cache.rb | ||
| discourse_public_exceptions.rb | ||
| enforce_hostname.rb | ||
| missing_avatars.rb | ||
| omniauth_bypass_middleware.rb | ||
| request_tracker.rb | ||
| turbo_dev.rb | ||