I’m using the API of Discourse with a custom UI. I’m attempting to integrate this behind an orchestration layer that already authenticates users. I’d like to be able to more or less bypass authentication on the Discourse side of things.
We use JWT tokens, and it seems that ideally I could just pass these along to Discourse and tell it to trust them. I see that there’s some JWT related projects in the discourse GitHub organization, but there’s no documentation or usage examples, Google hasn’t been helpful, I haven’t found any relevant threads in meta, and I don’t really speak Ruby
Is there a way I could leverage our existing authentication by just passing these tokens through to Discourse?
Failing that, as an API user, how can I create topics and posts on behalf of other, authenticated users?
I’m trying to do this, but I cannot specify an arbitrary username as api_username - if I specify any username other than my (admin) account, I get a 404 from the API.
Is this post out of date, or is there some other way to achieve creating topics as another user (other than creating an API key for every user)?
