Which validations can be bypassed and how when using the API to create topics/posts

Arkshine · March 14, 2024, 10:40pm

Yes, that should work (WP-Discourse uses it, for example)

app/controllers/posts_controller.rb

main


      
            post_id = params[:id] || params[:post_id]
            revision = params[:revision].to_i
            raise Discourse::InvalidParameters.new(:revision) if revision < 2
          
            post_revision = PostRevision.find_by(post_id: post_id, number: revision)
            raise Discourse::NotFound unless post_revision
          
            post_revision.post = find_post_from_params
            guardian.ensure_can_see!(post_revision)
          
            post_revision
          end
          
          def find_latest_post_revision_from_params
            post_id = params[:id] || params[:post_id]
          
            finder = PostRevision.where(post_id: post_id).order(:number)
            finder = finder.where(hidden: false) unless guardian.is_staff?
            post_revision = finder.last
          
            raise Discourse::NotFound unless post_revision

Topic		Replies	Views
Guardian bypassed through :skip_validations in TopicCreator but not in PostCreator Development	1	997	March 20, 2024
Migrating Content via API hangs after 3 topics Support	6	626	February 14, 2020
Topic duplicate Development	1	554	March 6, 2020
Posting a new topic via API Development rest-api	7	3992	January 29, 2025
How to set blank title when create topic by API Development	18	1208	April 20, 2021

Which validations can be bypassed and how when using the API to create topics/posts

Related topics