Hello :waving_hand:, I’m making a GitHub action posting to the Discourse forum. I found the post API, however, the document says Discourse users need to create an API Key from the admin panel , even though non-admin users have no admin panel. Here I have several questions: Is the API key designed…

Hello @KengoTODA , welcome here! :slight_smile: :wave: User API keys specification will be helpful for what you have described.

Thank you! I’ve checked the ‘API key generation flow’ part. I understood that it’s for web applications that can provide auth_redirect URL. Is there any recommended way for CLI or GitHub Actions?

If this is for a GitHub Action you will probably be better off creating a scoped api key, that only allows the actions you need, but yes you will need to be an admin to create this key.

For CLI programs, if this is necessary, you can launch a local web server and use a http://localhost:XXXXX/callback URL. The app does something similar.

OK I’ll have a try, thanks for your support!

You can create an user API following Generate User API Keys for testing

I’m working in this branch , and successfully run the command using localhost as redirect URL. However, after I click the button to authorize, the page https://meta.discourse.org/user-api-key reported a JS error and it could not proceed the operation. The ruby script works but it also fails when I ad…

I’m investigating this issue. The JS throws an error, because the POST method for /user-api-key returns 403 and build_not_found_page method in the controller does not invoke the preload_anonymous_data method that stores preloaded value. It’s not sure why the server responded 403 with <h1 class="t…

You need to add the domain (and path) to the allowed user api auth redirects site setting. If you’re manually issuing HTTP requests, then discourse://auth_redirect should work.

Thanks, I found the config in the site_settings.yml and understood why my request met 403. The discourse://auth_redirect does not work as expected to me, so I’ll try to ask users to input the encrypted token manually, just like the ruby code .

非管理员用户可以自行发放API密钥吗？

开发

blake (Blake Erickson) 2020 年12 月 14 日 18:03 4

如果这是用于 GitHub Action，您可能最好创建一个仅限所需操作的受限 API 密钥，但确实需要管理员权限才能创建此密钥。

话题		回复	浏览量
Create apikey for user programmatically as admin Development rest-api	8	2158	2024 年2 月 26 日
Generate User Api Key Without User Approval Development	3	1058	2024 年6 月 2 日
Allow API use by regular users, not just admins Development rest-api	6	1573	2023 年2 月 14 日
User API keys specification Integrations rest-api , reference	69	38132	2025 年9 月 22 日
Generating User Api Keys with REST API Development rest-api	20	9004	2018 年4 月 8 日

非管理员用户可以自行发放API密钥吗？

相关话题