Reverse engineer the Discourse API says Anything you can do on the site you can also do using the JSON api. Alas, https://docs.discourse.org/ Some endpoints do not require any authentication, pretty much anything else will require you to be authenticated. To become authenticated you will need…

[Bild] Reverse engineer the Discourse API Integrations Discourse is backed by a complete JSON api. Anything you can do on the site you can also do using the JSON api. The API is documented at docs.discourse.org . You can also use the discourse_api Ruby gem as a…

Update openapi.yml by jidanni · Pull Request #72 · discourse/discourse_api_docs · GitHub says However, without support from admins and an approved endpoint in the user api keys site settings “regular users” still can’t just generate their own api keys.

That response is incorrect. Any user can generate a user API key if the generation of user API keys is enabled for the user’s trust level. If you don’t set a redirect in the request payload it will display a base64 encoded response in the browser that contains the key. See this topic for a script t…

I’m thinking for the default case where person A has installed Discourse, and person B is just a simple user on person A’s Discourse, and A has not changed any admin settings, could B still do much with the API?

The User API key generation is enabled for all users by default, and anything you can do through the web interface you can do through the API because the web interface is just a frontend to the API. I personally use it in an extension in Chrome that keeps a running total of all my unread notificati…

If a user has an account on a Discourse instance already they should be able to use their same cookie authentication from the browser in any non-browser api requests.

API-Nutzung für normale Benutzer erlauben, nicht nur für Administratoren

Entwickler

blake (Blake Erickson) 14. Februar 2023 um 21:16 7

Wenn ein Benutzer bereits ein Konto auf einer Discourse-Instanz hat, sollte er seine Cookie-Authentifizierung vom Browser bei allen API-Anfragen, die kein Browser sind, verwenden können.

Thema		Antworten	Aufrufe
User API keys specification Integrations rest-api , reference	69	38178	22. September 2025
Create apikey for user programmatically as admin Development rest-api	8	2169	26. Februar 2024
Can non-admin user issue their own API key? Development rest-api	13	2989	2. September 2021
Generating User Api Keys with REST API Development rest-api	20	9020	8. April 2018
"Api-Key" and "Api-Username" for try.discourse.org? Development rest-api	12	1466	4. Februar 2025

API-Nutzung für normale Benutzer erlauben, nicht nur für Administratoren

Verwandte Themen