| Age | Commit message (Collapse) | Author |
|---|
|
closes #6550
|
|
|
|
We have an ApiController that wants to call #fetch_user. Since we can only inherit from one class i moved fetch_user into an extension.
|
|
require_login is require_token for the api controller
It also skips the verify_authenticity_token before filter.
So all Subclasses of the ApiController will only support token auth.
Also made the V1::UsersController a bit more strict. Now way for admins to alter other users through the api. We don't support that yet so let's not allow it either.
|
|
|
|
- default is true
- See issue #5217
- See companion change in leap_platform.
|
|
|
|
|
